last executing test programs: 37.70053906s ago: executing program 0 (id=4733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}, 0xffffffff}, &(0x7f0000000600)=0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}, 0x1, 0x0, 0x0, 0x44814}, 0x0) close(r4) close_range(r0, 0xffffffffffffffff, 0x2) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000180)={{@hyper}, @hyper}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="26003300d000000008021100000108021100000050505050505000"], 0x44}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'macvtap0\x00', 0x10}) 37.178061868s ago: executing program 0 (id=4735): socket(0x22, 0x2, 0x43ff) cachestat(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18}, './file2\x00'}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty}}}}}}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) unshare(0x22020600) r3 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fstat(r4, &(0x7f0000000080)) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 36.030019568s ago: executing program 0 (id=4736): r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020400) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x240802, 0x0) fstat(r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) 35.708923379s ago: executing program 0 (id=4737): socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00a81d000000da"], 0x0, 0x0, 0x0, 0x0}) 32.444339064s ago: executing program 0 (id=4745): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x80}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f00000002c0)) write$ppp(r6, &(0x7f00000003c0)='\x00!', 0x100000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) r8 = dup(r3) r9 = memfd_create(&(0x7f0000000fc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x1c#\x1c\xc9\x006U\xf8\x14D\b\x0f\xfd\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-:\xb6\xbc\x00\xa5\xa8\xe58\x00\x9fM\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8\x00\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.ooZ+)\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\xdbQ\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xa0\xef\xccUxhg\xffY\xe6\x83\xa6r\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\xa0\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.}\x89\xac\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x02\xab\t*\xbf\x89\xea\xaf\xd4\xe7)G\xc7\xd2\x81\xccT\xfa\"\xb3\xbe\xa1r\x9a \xd9\tb\xf1\x9aa\xdb\xffp\xc3\x9dFx\x18}\xb0/M\x12\x1a\xc1\xe8\n\x06\xac\xd2\xf1\x00\xcf!\x9274\x18\xc5U\xf7>\x12qsH\xbd\x1f|\x82\xb9\xcb\xe7H_\x95\x9f\xc1P\x16\x8a\xc4nxh\xde)x\xaa8\xe8\x8d\xe3pr\xba\xfeA\x89op\xde\xd4\xe1=\x8b\x9d\x1b\x9c\xe2F\xd0\xe1>\xd2\xe7\r;\x8fcq\xf1\xc0\fWG\xfb\xae\xe9\xa4\x0fAR{\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\xa4/\xc6-\x1e\xd9)\xab\xfe\v\rt\xd4p\xe3}\x87\xa7\x9cm2*\x8c\x02\xf3\xc2aJ\x1cQ\xe7]\xc1I\x8d\xc5;\x12k=\xab\xd8i(/\x05\xac\x9f\x13\xb9\x13\x8a\x87C&V\xdb\xc0\x11\xf1Y_\xfcc\xf8\x94D\xefV\xf7\xb6\xfaY4Q\xb6\xbe\xe8\x92\xa8U4\x8d\xf2<-\x05', 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r9, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b54d9391fec4647e0a1c2934cfde8e80d7f6e591f6a320847487bfbe55e35015fcc1824cd27189b63760775c5831a0866ee64818b40"}, 0x48, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0xb0, &(0x7f0000000380)="a2ff06c52a0958d2eea4004f0de4f03368a08756e199838ffdd39a009f7acef49a18759c83f525716719b31b2771982617d5f7a4780c577aef1d0cbceff1c72ff1bc585ca78c43984b02a954def82fd787845c1b60159b9990a01aa9c8faa1c065e13ab83044f4c56274ab6be43381778681a4bc946d98b237cbee882389d226ff36e6a35a1f7ee898a46cf991ea815bf6daefcb3715eb35663ff6582aa737237c6e1416529639f6c1327dd66f0b29b1", 0x8a, 0x0, &(0x7f0000000440)="f2394df68df40a9e03e9d7f6c16d2e9e89ac46cec062df19cb4bb3bf70fa82e1a21c720861ecf4b0080ce86a24de65143d2043c8ea82e60d3ef0518b5fbb8d941b93a9aa675db591b73db699c44dc67ca5bc921d0847df35394bc4a8842ed93c060fefa2dd563e3609cb9c292bbf934a17bcd89f71616ce6b2bd05c6ab78bb226d3958df408f9da8d28e"}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x200000, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r10, 0x289e0cb5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 31.895119382s ago: executing program 0 (id=4747): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$key(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0xffffff7f, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 26.210717723s ago: executing program 3 (id=4765): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x8cff}}, './file0\x00'}) 25.934527173s ago: executing program 3 (id=4766): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x6908, &(0x7f0000000200)={0x0, 0x80400000, 0x10100, 0xffffffed}, &(0x7f00000003c0), &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r3, 0x0, 0xf96, 0x3, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000020540)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000780)={r6}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aa", 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) io_setup(0x101, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000000)) 24.762359391s ago: executing program 3 (id=4767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) write$nci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x780348a1b160dfdb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4000}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000000)=0x8) syz_io_uring_submit(0x0, 0x0, 0x0) 23.712911846s ago: executing program 3 (id=4769): socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00a81d000000da"], 0x0, 0x0, 0x0, 0x0}) 21.122805036s ago: executing program 3 (id=4772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002140)={'\x00', 0x0, 0x0, 0x1, 0x7, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4b4a, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) 15.625457979s ago: executing program 3 (id=4779): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="1107000000000000000006000000080003"], 0x1c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="92", 0x1}], 0x1}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="b2", 0x1}], 0x1}}], 0x1, 0xc081) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 11.15698489s ago: executing program 2 (id=4783): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x8cff}}, './file0\x00'}) 10.685599149s ago: executing program 2 (id=4784): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet(0x2, 0x6, 0x1000) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001580)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, 0x0}) mmap(&(0x7f00007ad000/0x4000)=nil, 0x4000, 0xf, 0x4008032, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$inet6_udp(0xa, 0x2, 0x0) close(r3) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(r2, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0xc000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000080)={0x80, 0x2, 0xc8, 0x40}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000300)="46f52ea05e1da92dfc2e68d091d24f958e14fdb70ab73f6738195a72048f7561032957f2a4fa3f9ce627192234149eec53c90d33a4a756ce77218404adc73de299c1d94e56b0fac12a4f367e2ed12eb980e900d0b42e4426813522f41207465cd7767f10f165db57893fda82468ca1b3716d1f3a3af996c50ef0f0f0af7081494a5dbdb370aa14ea650d85e4bbb4253b29e95d6c2f2d16d1c36ce3544235ed833f1137d0b63f9aa5cab81a3a296b156d8030c98931c54175a15848d371f381791531b0f6bae3e9e948bad6d4bed0f83be9bd01293289f81ba0e491a5978397c1ac40bd680b7fb9f2007412a2b0", 0xed}, {&(0x7f0000000400)="37ab2202ee1b1c54fda2478905861cfc49461a76e014f13625f99a9c3f0e50b2dd4a403e941b71466fb339ca1767125f32eaeea945b9c9b0e67fa412f8bac6ed1ee5b2a1d03a5f7557f8dccbb6214a48", 0x50}, {&(0x7f0000000480)="6cbe50f300f2b01186a0129641338c9219d926b660e647ab282a1c350a9cbf50a3f6f0256f8b102e240c41d4aff60c0f5393f8faa2cb9e625a442d8436cfcd5703e0f61ad7041caeba14f06a2e2e7cb45bb6b86e40bb7d816e45e401c4dc8ae6a6783d6c0d3667f4675e28", 0x6b}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000000)="e7179b0f413d878baabb66d22f3c", 0xe}], 0x5, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x1c, 0x1, 0x1, [r9, r8, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x20000845}, 0x48094) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r10}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x2000000b) 9.812737768s ago: executing program 4 (id=4786): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000a40902120001000000000904000000ef0101"], 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast6-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="e70f68", 0x3}], 0x1}], 0x1, 0x0) 8.713033118s ago: executing program 2 (id=4787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002140)={'\x00', 0x0, 0x0, 0x1, 0x7, 0x8}) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4b4a, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) 7.50139057s ago: executing program 2 (id=4788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) write$nci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x780348a1b160dfdb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4000}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000000)=0x8) syz_io_uring_submit(0x0, 0x0, 0x0) 7.375720276s ago: executing program 1 (id=4711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010101010000000000000000020000000cff1980080001000500000020000180060003400000000014000180080001007f000001080002007f000001"], 0x40}}, 0x0) syz_open_dev$amidi(&(0x7f0000000180), 0x0, 0x181) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x0, 0x80b}}}, 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 6.976540691s ago: executing program 4 (id=4789): r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000003680)={'ip6gre0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) unshare(0x28000600) rt_sigaction(0x7, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000600)) fallocate(0xffffffffffffffff, 0x2, 0x400000000000004, 0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5385, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4038ae7a, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6.939919096s ago: executing program 1 (id=4790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000400)=[@request_death, @increfs={0x40046304, 0x2}], 0xfc, 0x0, 0x0}) 6.018188676s ago: executing program 2 (id=4791): socket$alg(0x26, 0x5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00a81d000000da"], 0x0, 0x0, 0x0, 0x0}) 5.70308719s ago: executing program 1 (id=4792): r0 = socket$inet6(0xa, 0x5, 0xc35e) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x0, 0xfffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x29, @local, 0x100}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="010000000000000000000300000008000b00", @ANYBLOB="04000500050002000a"], 0x58}}, 0x0) listen(r3, 0xfff) syz_emit_ethernet(0x86, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaafbff0000000086dd600a843500500600fe800000000000000000fdff000000bbfe00005b8282f391167daa4000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4002000090780000fe06e2d4c3d9080a00000000000000001312d082e275205e556149a021cc13c33d890303000303000402131227406263e43d5959a166a23bd1116edc"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d0000200600fe8000000000000000000000000000bbfe80edffffaf3eef14000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000090780000080a00000000ff"], 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000000c0)={0x0, 'syz_tun\x00', {0x3}}) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8000081"], 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="9665a4db717f1f99256fca9b2b36c677b6ee67e3e09ab7aa38b8754df6c388e7a4b49e7c3ac7571e99b40e6a8e478c5cfc1f733406941b35211a8c72d7b5a491d850ac85105f2bdac072bc8688216408d25930fc1b9e83975f469a15c57dc65bc7871aba23f3ff57de243905d69e67cf63d26fd66c09e79839e71eb64b34650a2f35b8e7663a289cfaf3a82a6ae54dc1347f93ba2ac4e010f623", @ANYRES16=r6, @ANYBLOB="000227bd7000ffdbdf250100000008000400080000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x10000, 0x5, 0xfffffff9, 0x0, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x0, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd28) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.910437557s ago: executing program 4 (id=4793): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x3f0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x2d, 0x1, 0x0, 0x5}) 2.796193534s ago: executing program 4 (id=4794): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000080)) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 2.659345435s ago: executing program 1 (id=4795): bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) 2.324563515s ago: executing program 4 (id=4796): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) io_uring_setup(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001380)=""/151, 0x97}], 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "076a1400"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) io_setup(0x5, 0x0) r6 = inotify_init() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x6908, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x45b, &(0x7f00000003c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) inotify_add_watch(r6, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000008000c000000e47314002380050006000200000005000f0009000000c5d14f66b76724a4cf44a232a9e2deeaea7be46d1379381c7fcbe1e5b0b786802f03600e209ea6d1bc514ab54c976c2bf7ce5eb46346b617ff6e6e7ba0a9b4306b090c0a6aa46bf48b1b85a3f2ecf56dbab273398d83"], 0x44}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) 2.102955626s ago: executing program 1 (id=4797): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'syz_tun\x00', {0x3}}) 1.39233248s ago: executing program 2 (id=4798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010101010000000000000000020000000cff1980080001000500000020000180060003400000000014000180080001007f000001080002007f000001"], 0x40}}, 0x0) syz_open_dev$amidi(&(0x7f0000000180), 0x0, 0x181) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x0, 0x80b}}}, 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 897.351209ms ago: executing program 1 (id=4799): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) write$nci(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x780348a1b160dfdb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x4000}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000000)=0x8) syz_io_uring_submit(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=4800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000400)=[@request_death, @increfs={0x40046304, 0x2}], 0xfc, 0x0, 0x0}) kernel console output (not intermixed with test programs): ver this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2046.785923][T27702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.130224][T27684] hsr_slave_0: entered promiscuous mode [ 2047.131625][T22897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2047.202010][T27684] hsr_slave_1: entered promiscuous mode [ 2047.231744][T27684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2047.239353][T27684] Cannot create hsr debugfs directory [ 2047.354334][T22897] usb 5-1: Using ep0 maxpacket: 32 [ 2047.416835][T22897] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 2047.456846][T22897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.484630][T22897] usb 5-1: Product: syz [ 2047.491644][T22897] usb 5-1: Manufacturer: syz [ 2047.493116][T27702] hsr_slave_0: entered promiscuous mode [ 2047.496425][T22897] usb 5-1: SerialNumber: syz [ 2047.524055][T22897] usb 5-1: config 0 descriptor?? [ 2047.546163][T22897] as10x_usb: device has been detected [ 2047.549421][T27702] hsr_slave_1: entered promiscuous mode [ 2047.575711][T22897] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2047.586046][T27702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2047.624220][T27702] Cannot create hsr debugfs directory [ 2047.651969][T27624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2047.659441][T22897] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2047.697380][T27624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2047.739324][T22897] as10x_usb: error during firmware upload part1 [ 2047.771960][T22897] Registered device Abilis Systems DVB-Titan [ 2047.798977][T22897] usb 5-1: USB disconnect, device number 8 [ 2047.930320][T22897] Unregistered device Abilis Systems DVB-Titan [ 2047.962251][T22897] as10x_usb: device has been disconnected [ 2048.011741][T27624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2048.092861][T27624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2049.192284][T27702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2049.239102][T27702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.466680][T27624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2049.656892][T27702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2049.719028][T27702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.097502][T27702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2050.134131][T27702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.238014][T27624] 8021q: adding VLAN 0 to HW filter on device team0 [ 2050.443519][T27702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2050.503315][T27702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2050.601394][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.608571][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.703506][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.710686][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2051.027470][T27624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2051.204483][T27624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2051.764682][T27684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2051.852147][T27702] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2051.912340][T27702] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2052.051165][T27684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.123147][T27702] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2052.147065][T27624] veth0_vlan: entered promiscuous mode [ 2052.230077][T27684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.296981][T27702] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2052.448803][T27684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2052.561020][T27624] veth1_vlan: entered promiscuous mode [ 2052.788220][T27624] veth0_macvtap: entered promiscuous mode [ 2052.819812][T27624] veth1_macvtap: entered promiscuous mode [ 2052.915052][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.946226][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.966637][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.016349][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.055078][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.069164][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.089724][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.111623][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.141906][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.161774][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.182882][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.231603][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.253794][T27624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2053.320036][T27876] binder: 27874:27876 unknown command 0 [ 2053.354929][T27876] binder: 27874:27876 ioctl c0306201 20000100 returned -22 [ 2053.432221][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2053.484688][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.530556][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2053.555069][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.577193][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2053.592121][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.612831][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2053.645452][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.691635][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2053.738402][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.763313][T27624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2053.791012][T27624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.824626][T27624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2053.985379][T27624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.041630][T27624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.071532][T27624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.080297][T27624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2054.099877][T27882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4578'. [ 2054.188650][T27702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2054.213478][T27684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2054.347131][T27684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2054.378980][T27684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2054.460810][T27684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2054.468184][T15984] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2054.519320][T27702] 8021q: adding VLAN 0 to HW filter on device team0 [ 2054.585018][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.592162][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2054.669413][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.676539][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2054.684411][T15984] usb 5-1: Using ep0 maxpacket: 32 [ 2054.722086][T15984] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2054.762791][T15984] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2054.781237][T15984] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2054.797773][T15984] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2054.905805][T15984] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2054.916767][T15984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.940913][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2054.965726][T15984] usb 5-1: Product: syz [ 2054.969928][T15984] usb 5-1: Manufacturer: syz [ 2054.977353][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2054.994280][T15984] usb 5-1: SerialNumber: syz [ 2055.128767][T26177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2055.193458][T26177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2055.262876][T27882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.283506][T27702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2055.311018][T27882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.374690][T15984] usb 5-1: 0:2 : does not exist [ 2055.403564][T27684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.453574][T15984] usb 5-1: USB disconnect, device number 9 [ 2055.519909][T27702] veth0_vlan: entered promiscuous mode [ 2055.610060][T21458] udevd[21458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2055.674650][T27702] veth1_vlan: entered promiscuous mode [ 2055.736276][T27684] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.797437][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.804670][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2055.899726][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.907003][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2055.970284][T27702] veth0_macvtap: entered promiscuous mode [ 2056.051424][T27702] veth1_macvtap: entered promiscuous mode [ 2056.157741][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.209011][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.239516][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.298068][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.325213][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.346052][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.367692][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.400754][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.424403][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.482822][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.511453][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.529186][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.549471][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2056.621015][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.645873][T27702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2056.697346][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.735348][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.761724][ T5283] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2056.769535][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.801330][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.831530][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.880815][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2056.934485][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2056.963421][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 2056.976080][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.020163][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2057.043449][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.054958][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 2057.067533][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.080517][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2057.094607][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.109558][ T5283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2057.131337][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.141303][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2057.161544][T27702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.181966][ T5283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2057.198586][T27702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.211683][ T5283] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 2057.233293][T27702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2057.252872][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.274631][ T5283] usb 5-1: config 0 descriptor?? [ 2057.281295][T27901] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2057.314944][ T5230] Bluetooth: hci9: urb ffff88802a89de00 submission failed (90) [ 2057.336858][T27702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.384346][T27702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.400415][T27702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.431770][T27702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.512798][ T8] usb 5-1: USB disconnect, device number 10 [ 2057.740475][T27684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2057.844734][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2057.861509][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2057.956475][T27684] veth0_vlan: entered promiscuous mode [ 2058.009280][T27684] veth1_vlan: entered promiscuous mode [ 2058.087989][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.131847][T22897] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2058.162599][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.313625][T27684] veth0_macvtap: entered promiscuous mode [ 2058.351733][T27684] veth1_macvtap: entered promiscuous mode [ 2058.383782][T22897] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 2058.406618][T22897] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2058.409157][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.462004][T22897] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2058.522806][T22897] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2058.522825][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.522846][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.568402][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.588849][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.616386][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.658472][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.684536][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.684986][T22897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2058.704817][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.748035][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.760102][T27913] binder: 27910:27913 ioctl c0306201 20000080 returned -14 [ 2058.800384][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.830514][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.868402][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.885128][T22897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.909229][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2058.967748][T22897] usb 2-1: Product: syz [ 2058.975178][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2058.997046][T22897] usb 2-1: Manufacturer: syz [ 2059.014145][T22897] usb 2-1: SerialNumber: syz [ 2059.034556][T27907] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2059.055073][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2059.113639][T27684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2059.156060][T27911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4548'. [ 2059.165313][T27911] netlink: 'syz.3.4548': attribute type 7 has an invalid length. [ 2059.218017][T27911] netlink: 'syz.3.4548': attribute type 8 has an invalid length. [ 2059.261931][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 2059.330502][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2059.389124][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2059.430651][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2059.486425][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2059.683561][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2059.731697][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2059.775059][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2059.809223][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2059.825074][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2059.875997][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2059.916379][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2059.958982][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2060.000448][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2060.039375][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2060.100384][T27684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2060.173666][T27684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2060.232383][T27684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2060.332568][T27927] batadv0: entered promiscuous mode [ 2060.468866][T27927] batadv_slave_0: entered promiscuous mode [ 2060.511871][ T51] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2060.546964][T27927] batadv_slave_0: left promiscuous mode [ 2060.580984][T27927] batadv0: left promiscuous mode [ 2060.791819][T27684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.802604][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 2060.823819][ T51] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5B, changing to 0xB [ 2060.836878][T27684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.862075][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2060.931434][T27684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.968556][T27684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.969075][ T51] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2061.081116][T22897] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2061.101150][ T51] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2061.129432][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.157409][T22897] usb 2-1: USB disconnect, device number 101 [ 2061.200269][ T51] usb 5-1: config 0 descriptor?? [ 2061.256189][ T51] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 2061.483722][ T51] usb 5-1: USB disconnect, device number 11 [ 2061.515550][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2061.545732][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.654463][T15227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2061.716728][T15227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2061.856686][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2061.856705][ T29] audit: type=1326 audit(1724746833.329:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27940 comm="syz.3.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399f79e79 code=0x7fc00000 [ 2062.006816][T27946] macvlan2: entered allmulticast mode [ 2062.024859][T27946] team_slave_0: entered promiscuous mode [ 2062.031260][T27946] team_slave_1: entered promiscuous mode [ 2062.063481][T27946] team0: entered allmulticast mode [ 2062.078918][T27946] team_slave_0: entered allmulticast mode [ 2062.091679][T27946] team_slave_1: entered allmulticast mode [ 2062.121851][T27946] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2062.161248][T27946] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 2062.304886][T27948] bond0: entered promiscuous mode [ 2062.347572][T27948] bond_slave_0: entered promiscuous mode [ 2062.382764][T27948] bond_slave_1: entered promiscuous mode [ 2062.402991][T27948] macvlan2: entered promiscuous mode [ 2062.411864][ T29] audit: type=1326 audit(1724746833.899:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27947 comm="syz.1.4599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x0 [ 2062.439584][T27958] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 2062.451654][T27948] team0: entered promiscuous mode [ 2063.476046][T27975] fuse: Unknown parameter 'gYid' [ 2063.584659][T27977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4606'. [ 2063.838868][T27984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4608'. [ 2064.141787][T27990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4609'. [ 2064.172716][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2064.223361][T27990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4609'. [ 2064.403477][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.422095][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2064.467493][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2064.489977][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2064.529671][ T8] usb 4-1: SerialNumber: syz [ 2064.822605][T27986] pim6reg: entered allmulticast mode [ 2064.884008][ T8] usb 4-1: 0:2 : does not exist [ 2064.922011][ T8] usb 4-1: unit 5 not found! [ 2064.983585][ T8] usb 4-1: USB disconnect, device number 14 [ 2065.103333][T21458] udevd[21458]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2065.563420][T28014] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4617'. [ 2065.971726][T22897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2066.183349][T22897] usb 4-1: Using ep0 maxpacket: 16 [ 2066.202685][T22897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2066.243590][T22897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2066.289231][T28020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2066.315708][T22897] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2066.353495][T22897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.388880][T22897] usb 4-1: Product: syz [ 2066.419663][T22897] usb 4-1: Manufacturer: syz [ 2066.431718][T22897] usb 4-1: SerialNumber: syz [ 2066.450781][T22897] usb 4-1: config 0 descriptor?? [ 2066.461415][T22897] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2066.491625][T22897] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2067.064863][T22897] em28xx 4-1:0.0: chip ID is em2874 [ 2067.184554][T28031] Cannot find add_set index 0 as target [ 2067.192168][T28028] binder: 28025:28028 ioctl c018620c 20000000 returned -14 [ 2067.299302][T28031] xt_NFQUEUE: number of total queues is 0 [ 2067.644178][T28037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.646231][ T5280] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2067.670970][T28037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.743471][T22897] usb 4-1: USB disconnect, device number 15 [ 2067.751145][T22897] em28xx 4-1:0.0: Disconnecting em28xx [ 2067.792613][T22897] em28xx 4-1:0.0: Freeing device [ 2068.038551][ T5280] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2068.089709][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.138470][ T5280] usb 5-1: Product: syz [ 2068.165501][ T5280] usb 5-1: Manufacturer: syz [ 2068.173291][ T5280] usb 5-1: SerialNumber: syz [ 2068.195301][ T5280] usb 5-1: config 0 descriptor?? [ 2068.435642][T22897] usb 5-1: USB disconnect, device number 12 [ 2069.192809][T28054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4627'. [ 2069.840971][T28053] fuse: Unknown parameter 'fZ' [ 2069.984431][ T5230] Bluetooth: hci8: command 0x0406 tx timeout [ 2070.729540][T28075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2071.951617][ T5284] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2072.151851][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 2072.169409][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2072.209052][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2072.241682][T22897] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2072.265004][ T5284] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2072.284429][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.304233][ T5284] usb 4-1: config 0 descriptor?? [ 2072.360614][ T5284] hub 4-1:0.0: USB hub found [ 2072.485449][T22897] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2072.515240][T22897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.555808][T22897] usb 2-1: Product: syz [ 2072.571679][T22897] usb 2-1: Manufacturer: syz [ 2072.576500][ T5284] hub 4-1:0.0: 1 port detected [ 2072.611656][T22897] usb 2-1: SerialNumber: syz [ 2072.632072][T22897] usb 2-1: config 0 descriptor?? [ 2072.889005][T23158] usb 2-1: USB disconnect, device number 102 [ 2072.996288][ T5284] usb 4-1: USB disconnect, device number 16 [ 2073.560752][T28085] syz.4.4641 (28085): drop_caches: 2 [ 2074.126038][ T2914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.276341][ T2914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.489612][ T2914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2074.969635][ T2914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2075.274170][ T29] audit: type=1326 audit(1724746846.759:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2075.391634][ T29] audit: type=1326 audit(1724746846.759:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2075.465831][ T29] audit: type=1326 audit(1724746846.759:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2075.581987][ T29] audit: type=1326 audit(1724746846.759:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2075.774150][ T29] audit: type=1326 audit(1724746846.759:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2075.861624][ T29] audit: type=1326 audit(1724746846.759:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2075.907994][ T2914] bridge_slave_1: left allmulticast mode [ 2075.931562][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2075.946078][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2075.954641][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2075.982135][ T29] audit: type=1326 audit(1724746846.759:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2076.011687][ T29] audit: type=1326 audit(1724746846.759:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2076.021566][ T2914] bridge_slave_1: left promiscuous mode [ 2076.034921][ T29] audit: type=1326 audit(1724746846.759:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2076.065838][ T29] audit: type=1326 audit(1724746846.759:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28101 comm="syz.1.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facdf779e79 code=0x7ffc0000 [ 2076.088882][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2076.096871][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2076.104584][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2076.265505][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.364186][T28124] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 2076.383552][ T2914] bridge_slave_0: left allmulticast mode [ 2076.389223][ T2914] bridge_slave_0: left promiscuous mode [ 2076.413309][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.431945][T10655] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2076.701778][T10655] usb 2-1: Using ep0 maxpacket: 8 [ 2076.722554][T10655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2076.780824][T10655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 2076.869175][T10655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2076.948765][T10655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2077.030987][T10655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2077.081737][T10655] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2077.133518][T10655] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 2077.159673][T10655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.178753][T23373] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2077.188113][T23373] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2077.202080][T23373] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2077.270923][T23373] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2077.294987][T10655] usb 2-1: config 0 descriptor?? [ 2077.300480][T23373] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2077.322893][T23373] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2077.388729][T28119] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2077.619261][ T5230] Bluetooth: hci10: urb ffff88805fd17200 submission failed (90) [ 2077.819840][T23158] usb 2-1: USB disconnect, device number 103 [ 2078.147782][ T5230] Bluetooth: hci8: command tx timeout [ 2078.203012][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2078.212041][ T2914] bond_slave_0: left promiscuous mode [ 2078.242911][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2078.251914][ T2914] bond_slave_1: left promiscuous mode [ 2078.264452][ T2914] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 2078.282631][ T2914] macvlan2: left promiscuous mode [ 2078.294489][ T2914] team0: left promiscuous mode [ 2078.340419][ T2914] team0: left allmulticast mode [ 2078.345564][ T2914] team_slave_0: left allmulticast mode [ 2078.365838][ T2914] team_slave_1: left allmulticast mode [ 2078.379834][ T2914] team_slave_0: left promiscuous mode [ 2078.386043][ T2914] team_slave_1: left promiscuous mode [ 2078.464615][ T2914] bond0 (unregistering): Released all slaves [ 2079.421722][ T5230] Bluetooth: hci9: command tx timeout [ 2079.494732][T28145] syz.1.4654 (28145): drop_caches: 2 [ 2079.551886][ T2914] hsr_slave_0: left promiscuous mode [ 2079.634933][ T2914] hsr_slave_1: left promiscuous mode [ 2079.702058][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2079.732632][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2079.846753][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2079.868655][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2079.921599][T28160] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2079.959970][ T2914] veth1_macvtap: left promiscuous mode [ 2079.973289][ T2914] veth0_macvtap: left promiscuous mode [ 2079.990524][ T2914] veth1_vlan: left promiscuous mode [ 2080.021778][ T2914] veth0_vlan: left promiscuous mode [ 2080.225520][ T5230] Bluetooth: hci8: command tx timeout [ 2080.712215][ T2914] pim6reg (unregistering): left allmulticast mode [ 2081.510811][ T5230] Bluetooth: hci9: command tx timeout [ 2082.301909][ T5230] Bluetooth: hci8: command tx timeout [ 2082.515052][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 2082.736005][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 2083.581694][ T5230] Bluetooth: hci9: command tx timeout [ 2084.391729][ T5230] Bluetooth: hci8: command tx timeout [ 2085.666665][ T5230] Bluetooth: hci9: command tx timeout [ 2085.706010][T28137] chnl_net:caif_netlink_parms(): no params data found [ 2085.883185][T23373] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2085.923441][T23373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2085.942003][T23373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2086.002493][T23373] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2086.021837][T23373] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2086.032002][T23373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2086.060580][T28123] chnl_net:caif_netlink_parms(): no params data found [ 2086.710836][T28137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.741660][T28137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.748957][T28137] bridge_slave_0: entered allmulticast mode [ 2086.823023][T28137] bridge_slave_0: entered promiscuous mode [ 2086.853377][T28137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.902288][T28137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.909583][T28137] bridge_slave_1: entered allmulticast mode [ 2086.951124][T23373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2086.961738][T23373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2086.969956][T23373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2086.978295][T23373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2087.031840][T23373] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2087.033854][T28137] bridge_slave_1: entered promiscuous mode [ 2087.052581][T23373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2087.569146][T28137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2087.670656][T28123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2087.721776][T28123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2087.729094][T28123] bridge_slave_0: entered allmulticast mode [ 2087.753976][T28123] bridge_slave_0: entered promiscuous mode [ 2087.775242][T28123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2087.801649][T28123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.808936][T28123] bridge_slave_1: entered allmulticast mode [ 2087.853029][T28123] bridge_slave_1: entered promiscuous mode [ 2087.954125][T28137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2088.141831][ T5230] Bluetooth: hci7: command tx timeout [ 2088.238185][T28123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2088.285129][T28123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2088.569411][ T2914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.675210][T28137] team0: Port device team_slave_0 added [ 2088.713783][T28137] team0: Port device team_slave_1 added [ 2089.191656][ T5230] Bluetooth: hci2: command tx timeout [ 2089.209882][ T2914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2089.433914][T28137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2089.440900][T28137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2089.551582][T28137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2089.647836][T28123] team0: Port device team_slave_0 added [ 2089.685034][T28123] team0: Port device team_slave_1 added [ 2089.833067][T23373] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2089.845368][T23373] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2089.891642][T23373] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2089.912298][ T2914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2089.933590][T23373] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2089.941438][T23373] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2089.952016][T23373] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2090.031984][T28137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2090.038963][T28137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2090.181542][T28137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2090.231560][ T5230] Bluetooth: hci7: command tx timeout [ 2090.373492][T28123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2090.391655][T28123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2090.441834][T28123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2090.503222][ T2914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2090.706140][T28123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2090.730107][T28123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2090.841548][T28123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2091.060813][T28137] hsr_slave_0: entered promiscuous mode [ 2091.088374][T28137] hsr_slave_1: entered promiscuous mode [ 2091.096810][T28137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2091.143429][T28137] Cannot create hsr debugfs directory [ 2091.271678][ T5230] Bluetooth: hci2: command tx timeout [ 2091.532513][T28123] hsr_slave_0: entered promiscuous mode [ 2091.563771][T28123] hsr_slave_1: entered promiscuous mode [ 2091.581904][T28123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2091.589496][T28123] Cannot create hsr debugfs directory [ 2091.626910][T28198] chnl_net:caif_netlink_parms(): no params data found [ 2092.062119][ T5230] Bluetooth: hci10: command tx timeout [ 2092.312639][ T5230] Bluetooth: hci7: command tx timeout [ 2092.672122][T28187] chnl_net:caif_netlink_parms(): no params data found [ 2092.912635][ T2914] bridge_slave_1: left allmulticast mode [ 2092.918318][ T2914] bridge_slave_1: left promiscuous mode [ 2092.938915][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.014714][ T2914] bridge_slave_0: left allmulticast mode [ 2093.020391][ T2914] bridge_slave_0: left promiscuous mode [ 2093.081828][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.341585][ T5230] Bluetooth: hci2: command tx timeout [ 2094.141639][ T5230] Bluetooth: hci10: command tx timeout [ 2094.381623][ T5230] Bluetooth: hci7: command tx timeout [ 2094.882915][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2094.920192][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2094.942806][ T2914] bond0 (unregistering): Released all slaves [ 2095.185279][T28198] bridge0: port 1(bridge_slave_0) entered blocking state [ 2095.221619][T28198] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.228828][T28198] bridge_slave_0: entered allmulticast mode [ 2095.291955][T28198] bridge_slave_0: entered promiscuous mode [ 2095.337479][T28198] bridge0: port 2(bridge_slave_1) entered blocking state [ 2095.401567][T28198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.421653][ T5230] Bluetooth: hci2: command tx timeout [ 2095.448507][T28198] bridge_slave_1: entered allmulticast mode [ 2095.492433][T28198] bridge_slave_1: entered promiscuous mode [ 2096.113542][T28198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2096.159758][T28198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2096.232306][ T5230] Bluetooth: hci10: command tx timeout [ 2096.462341][T28187] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.469582][T28187] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.502159][T28187] bridge_slave_0: entered allmulticast mode [ 2096.511717][T28187] bridge_slave_0: entered promiscuous mode [ 2096.543618][T28187] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.550738][T28187] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.581967][T28187] bridge_slave_1: entered allmulticast mode [ 2096.602426][T28187] bridge_slave_1: entered promiscuous mode [ 2096.910004][T28219] chnl_net:caif_netlink_parms(): no params data found [ 2096.968529][T28198] team0: Port device team_slave_0 added [ 2097.085520][ T2914] hsr_slave_0: left promiscuous mode [ 2097.127133][ T2914] hsr_slave_1: left promiscuous mode [ 2097.136872][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2097.171562][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2097.202388][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2097.209816][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2097.312231][ T2914] veth1_macvtap: left promiscuous mode [ 2097.317800][ T2914] veth0_macvtap: left promiscuous mode [ 2097.337841][ T2914] veth1_vlan: left promiscuous mode [ 2097.371626][ T2914] veth0_vlan: left promiscuous mode [ 2098.302152][ T5230] Bluetooth: hci10: command tx timeout [ 2099.098575][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 2099.186176][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.192639][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.512185][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 2101.614844][T28187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2101.683376][T28187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2101.722132][T28198] team0: Port device team_slave_1 added [ 2102.359849][T28187] team0: Port device team_slave_0 added [ 2102.404557][T28187] team0: Port device team_slave_1 added [ 2102.411015][T28198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2102.471494][T28198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2102.541491][T28198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2102.583898][T28198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2102.590858][T28198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2102.691582][T28198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2103.213882][T28187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2103.220853][T28187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2103.321580][T28187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2103.358532][T28219] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.422213][T28219] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.429533][T28219] bridge_slave_0: entered allmulticast mode [ 2103.493199][T28219] bridge_slave_0: entered promiscuous mode [ 2103.713680][T28187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2103.720647][T28187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2103.831853][T28187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2103.882136][T28219] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.889221][T28219] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.902104][T28219] bridge_slave_1: entered allmulticast mode [ 2103.908890][T28219] bridge_slave_1: entered promiscuous mode [ 2104.253500][T28198] hsr_slave_0: entered promiscuous mode [ 2104.259751][T28198] hsr_slave_1: entered promiscuous mode [ 2104.274268][T28198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2104.308479][T28198] Cannot create hsr debugfs directory [ 2104.717661][T28187] hsr_slave_0: entered promiscuous mode [ 2104.763062][T28187] hsr_slave_1: entered promiscuous mode [ 2104.812799][T28187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2104.823411][T28187] Cannot create hsr debugfs directory [ 2104.831756][T28219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2104.867393][T28219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2105.495899][T28219] team0: Port device team_slave_0 added [ 2105.524726][T28219] team0: Port device team_slave_1 added [ 2106.034597][T28219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2106.072084][T28219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.146624][T28219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2106.204005][T28219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2106.232096][T28219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.321508][T28219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2106.405303][T28123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2106.751298][T28123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2106.786644][T28123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2106.877838][T28219] hsr_slave_0: entered promiscuous mode [ 2106.890915][T28219] hsr_slave_1: entered promiscuous mode [ 2106.942012][T28219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2106.949611][T28219] Cannot create hsr debugfs directory [ 2106.994884][T28123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2107.538930][T28137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2107.601372][T28137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2107.697349][T28198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.832723][T28137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2107.902539][T28137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2108.065683][T28198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.310022][T28198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.625811][T28198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2108.895632][T28123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.237791][T28123] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.385647][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.392852][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.657583][T28187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.910172][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.917387][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.022784][T28198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2110.068424][T28198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2110.307223][T28187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.393232][T28198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2110.424851][T28198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2110.672192][T28187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.814343][T28123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2110.907217][T28137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2111.152367][T28187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.307635][T28137] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.446490][T26177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.453717][T26177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2111.546932][T28123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2111.606790][T26177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.613933][T26177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.075213][T28187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2112.500510][T28219] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.591605][T28187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2112.656040][T28187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2112.775557][T28137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2112.944902][T28219] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.022764][T28187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2113.243277][T28219] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.447033][T28198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.680597][T28219] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.799516][T28123] veth0_vlan: entered promiscuous mode [ 2113.990034][T28123] veth1_vlan: entered promiscuous mode [ 2114.100504][T28198] 8021q: adding VLAN 0 to HW filter on device team0 [ 2114.174635][T28123] veth0_macvtap: entered promiscuous mode [ 2114.256574][T28137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2114.297779][T28123] veth1_macvtap: entered promiscuous mode [ 2114.343024][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.350213][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.418703][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.425872][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.652337][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.691529][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.701372][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.791698][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.842492][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.883381][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.901628][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.931837][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.001685][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.071649][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.111807][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.161637][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.231610][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2115.301572][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.350204][T28123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.563254][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.605248][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.641558][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.691486][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.701339][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.761619][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.811608][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.851490][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.881677][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.941507][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.951362][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.011562][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.051507][T28123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2116.078498][T28123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.113580][T28123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2116.153968][T28187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.218888][T28219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2116.266188][T28219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2116.353981][T28123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.401959][T28123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.410703][T28123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.491502][T28123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.559864][T28137] veth0_vlan: entered promiscuous mode [ 2116.621664][T23373] Bluetooth: hci0: command 0x0406 tx timeout [ 2116.628353][T28219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2116.656845][T28187] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.753194][T28219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2116.912233][T26183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.919351][T26183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.005971][T28137] veth1_vlan: entered promiscuous mode [ 2117.107746][T15227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.114885][T15227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.507685][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.542109][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.564964][T28198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.933731][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.964390][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.084872][T28137] veth0_macvtap: entered promiscuous mode [ 2118.142885][T28137] veth1_macvtap: entered promiscuous mode [ 2118.408749][T28198] veth0_vlan: entered promiscuous mode [ 2118.496352][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2118.537933][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.597765][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2118.618636][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.649975][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2118.691750][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.738583][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2118.785392][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.822870][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2118.879761][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2118.918454][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2118.981541][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.039624][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2119.081567][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.121510][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2119.189158][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.237063][T28137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2119.346386][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2119.431617][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.481525][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2119.569209][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.628670][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2119.687032][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.733741][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2119.807223][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2119.842362][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2119.934214][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.021685][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.131544][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.180323][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.227428][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.281543][T28137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2120.341548][T28137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2120.398096][T28137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2120.470127][T28347] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (8) [ 2120.546530][T28187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.592199][T28219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2120.674407][T28198] veth1_vlan: entered promiscuous mode [ 2120.853281][T28137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.932619][T28137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.949696][T28357] FAULT_INJECTION: forcing a failure. [ 2120.949696][T28357] name failslab, interval 1, probability 0, space 0, times 0 [ 2120.991601][T28357] CPU: 0 UID: 0 PID: 28357 Comm: syz.3.4662 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 2121.002133][T28137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.002383][T28357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2121.011037][T28137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2121.021062][T28357] Call Trace: [ 2121.021074][T28357] [ 2121.021082][T28357] dump_stack_lvl+0x241/0x360 [ 2121.021111][T28357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2121.021130][T28357] ? __pfx__printk+0x10/0x10 [ 2121.021158][T28357] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2121.021178][T28357] ? __pfx___might_resched+0x10/0x10 [ 2121.021210][T28357] should_fail_ex+0x3b0/0x4e0 [ 2121.021244][T28357] should_failslab+0xac/0x100 [ 2121.021271][T28357] ? assoc_array_insert+0x52c/0x33e0 [ 2121.021292][T28357] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2121.021320][T28357] assoc_array_insert+0x52c/0x33e0 [ 2121.021341][T28357] ? rcu_is_watching+0x15/0xb0 [ 2121.021377][T28357] ? key_task_permission+0x39a/0x4f0 [ 2121.021399][T28357] ? __pfx_assoc_array_insert+0x10/0x10 [ 2121.021416][T28357] ? security_key_permission+0x87/0xb0 [ 2121.021441][T28357] ? __pfx___mutex_lock+0x10/0x10 [ 2121.021466][T28357] ? __pfx_down_write+0x10/0x10 [ 2121.021484][T28357] ? keyring_search+0x4ae/0x5b0 [ 2121.021513][T28357] __key_link_begin+0xe5/0x1f0 [ 2121.021542][T28357] key_link+0x165/0x450 [ 2121.021568][T28357] ? __pfx_key_link+0x10/0x10 [ 2121.021590][T28357] ? bpf_lsm_key_permission+0x9/0x10 [ 2121.021609][T28357] ? security_key_permission+0x87/0xb0 [ 2121.021633][T28357] keyctl_keyring_search+0x29f/0x3f0 [ 2121.021658][T28357] ? __pfx_keyctl_keyring_search+0x10/0x10 [ 2121.157137][T28357] ? vfs_write+0x7c4/0xc90 [ 2121.161550][T28357] __se_sys_keyctl+0x5e1/0xa50 [ 2121.166298][T28357] ? __pfx___se_sys_keyctl+0x10/0x10 [ 2121.171566][T28357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2121.177527][T28357] ? __fget_files+0x3f6/0x470 [ 2121.182203][T28357] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2121.188180][T28357] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2121.194495][T28357] ? do_syscall_64+0x100/0x230 [ 2121.199263][T28357] ? __x64_sys_keyctl+0x20/0xc0 [ 2121.204122][T28357] do_syscall_64+0xf3/0x230 [ 2121.208610][T28357] ? clear_bhb_loop+0x35/0x90 [ 2121.213276][T28357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.219152][T28357] RIP: 0033:0x7f46d8f79e79 [ 2121.223553][T28357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.243139][T28357] RSP: 002b:00007f46d9cfc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2121.251543][T28357] RAX: ffffffffffffffda RBX: 00007f46d9115f80 RCX: 00007f46d8f79e79 [ 2121.259496][T28357] RDX: 0000000020000000 RSI: 00000000039a562d RDI: 000000000000000a [ 2121.267449][T28357] RBP: 00007f46d9cfc090 R08: 00000000039a562d R09: 0000000000000000 [ 2121.275404][T28357] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2121.283359][T28357] R13: 0000000000000000 R14: 00007f46d9115f80 R15: 00007f46d923fa38 [ 2121.291322][T28357] [ 2121.554656][T28219] 8021q: adding VLAN 0 to HW filter on device team0 [ 2121.646740][T28198] veth0_macvtap: entered promiscuous mode [ 2121.770500][T26183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.777645][T26183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.842540][T26183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.849712][T26183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.907102][T28198] veth1_macvtap: entered promiscuous mode [ 2121.986518][T28187] veth0_vlan: entered promiscuous mode [ 2122.217296][T28219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2122.290133][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.333811][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.367893][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.427789][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.515368][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.558352][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.630377][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.711081][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.797337][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.831337][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.880591][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.942458][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.991578][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.061738][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.131599][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.161665][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.195627][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2123.214829][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.250436][T28198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.393295][T28187] veth1_vlan: entered promiscuous mode [ 2123.427107][T26177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.511670][T26177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.661233][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.691668][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.733406][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.781564][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.821670][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.875190][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.942152][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.991545][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.032972][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.061943][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.121581][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.161580][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.293859][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.360949][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.451528][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.503423][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.567119][T28198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.625820][T28198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.655795][T28198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2124.758895][T26183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2124.771240][T28198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.821718][T26183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2124.851079][T28198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.921596][T28198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.983663][T28198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.036806][ T51] IPVS: starting estimator thread 0... [ 2125.182063][T28385] IPVS: using max 21 ests per chain, 50400 per kthread [ 2125.220476][T28219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2125.449302][T28187] veth0_macvtap: entered promiscuous mode [ 2125.592784][T28187] veth1_macvtap: entered promiscuous mode [ 2125.701873][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.751672][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.940504][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.041218][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.091587][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.176812][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.285174][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.319713][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.374333][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.422146][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.450445][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.546517][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.613371][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.678341][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.741532][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.781711][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.825192][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.877875][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2126.934629][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2126.991377][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.055666][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2127.122147][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.163067][T28187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2127.406647][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2127.410445][T28219] veth0_vlan: entered promiscuous mode [ 2127.467204][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.481731][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2127.522594][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.568589][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.594280][T28403] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 2127.606258][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.642801][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.714651][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.771620][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.801719][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.832497][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.886170][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2127.941790][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2127.981496][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2128.045619][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2128.092263][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2128.112057][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2128.153000][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2128.198512][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2128.303157][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2128.338091][T28187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2128.387819][T28187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2128.472588][T28187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2128.665083][T28187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.721516][T28187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.759934][T28187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.830940][T28187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2128.916102][T28219] veth1_vlan: entered promiscuous mode [ 2128.978125][T28412] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2129.241143][T28219] veth0_macvtap: entered promiscuous mode [ 2129.412740][T28219] veth1_macvtap: entered promiscuous mode [ 2129.516476][T15227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2129.557076][T15227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2129.611703][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2129.675262][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2129.715057][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2129.793585][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2129.851017][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2129.909921][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2129.967407][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.014244][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.051704][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.095852][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.133133][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.173783][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.227389][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.280172][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.344013][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.386767][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.451553][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.491901][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.522544][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.571497][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.601547][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2130.664155][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.695351][T28219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2130.822078][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2130.910369][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2130.983837][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.017792][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.078591][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.103068][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.157160][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.191533][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.231496][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.281629][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.296501][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.353449][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.391542][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.440705][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.471556][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.514886][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.566976][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.604503][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.641566][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.696927][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.747016][T28219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2131.801526][T28219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2131.875077][T28219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2131.973244][T15227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.005131][T15227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.033629][T28219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.089087][T28219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.111536][T28219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.120276][T28219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.560564][T28449] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4676'. [ 2132.884059][T15227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.884085][T15227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.068330][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.068356][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.251696][ T5288] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2133.441597][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 2133.528269][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2133.528307][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2133.528335][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2133.528378][ T5288] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2133.528402][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.531054][ T5288] usb 3-1: config 0 descriptor?? [ 2133.532041][T28458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2133.541682][ T5288] hub 3-1:0.0: USB hub found [ 2133.851670][ T5288] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2134.051084][T28482] fuse: Bad value for 'rootmode' [ 2134.142793][ T5288] hid-generic 0003:046D:C314.0052: item fetching failed at offset 0/1 [ 2134.145393][ T5288] hid-generic 0003:046D:C314.0052: probe with driver hid-generic failed with error -22 [ 2135.142612][T28508] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.4685'. [ 2135.193833][T28508] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 2135.272158][ T5283] usb 3-1: USB disconnect, device number 32 [ 2136.470436][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4686'. [ 2136.531733][T10655] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2136.753449][T10655] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.811582][T10655] usb 5-1: config 0 has no interfaces? [ 2136.832200][T10655] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 2136.888492][T10655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.940707][T10655] usb 5-1: config 0 descriptor?? [ 2137.328627][T28531] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 2137.462110][ T1857] usb 5-1: USB disconnect, device number 13 [ 2138.077474][T28536] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2138.898581][T28548] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4695'. [ 2139.419543][T22897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2139.661728][T22897] usb 5-1: Using ep0 maxpacket: 16 [ 2139.685029][T22897] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2139.717548][T22897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2139.754248][T22897] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2139.801618][T22897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.832549][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4698'. [ 2139.860500][T28556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4698'. [ 2139.869731][T22897] usb 5-1: Product: 儍֞Ȇ맾찌޼ᄯ䐾肙Ῥ惑ꝍ䨀嘫ꅔ媯퐾牃ȇ⁢虈瞷鴩Υ᪦嶂쩪踕礤㟃ꠛ꣯唓ዂ쩦ﱚ朕짅㾒郭胋㇡㫘闱 [ 2140.071193][T22897] usb 5-1: Manufacturer: 눘捬ꋙ뛥氿ʨ♗끍༜汱茢䶪ꨈ죍఑붖셲텿愳រ㽮軶೧舢婯繹鋅嵉⦹봰㟀ꑎ즈墼㾍፪ꕇ菔Ûѳ肮俸㞙뷲衴컟竛관⿊㴨瞪艦譈෧䜲뚩婧乙件⠽鶞ꯈ餏髚땹໣躑쏺쐧凡줈⍨䥤줈鶨ꠢ憈ἠᬓ檄석䍌㍀⶘긻缥栠 [ 2140.236395][T22897] usb 5-1: SerialNumber: 藪涍蟖Ꞡ냵뛆랸ᕺựᎠ｡泑䷝䦶敂낥㊷뎽╳⛉ৌ䑯⇕椧톄㽗艃邋恰袑⭭ҏ鮗깘둄쮢霭횷뀁뚻퇞咼쑙 [ 2140.281835][T10655] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2140.586156][T10655] usb 3-1: config 0 has no interfaces? [ 2140.593265][T10655] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2140.658036][T10655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.707792][T10655] usb 3-1: config 0 descriptor?? [ 2141.182107][T23373] Bluetooth: hci8: command 0x0406 tx timeout [ 2142.075508][T22897] usb 5-1: 0:2 : does not exist [ 2142.157782][T28563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2142.193571][T22897] usb 5-1: USB disconnect, device number 14 [ 2142.362104][T28563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2142.467174][T28453] udevd[28453]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2143.262032][ T5230] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 2143.272513][ T5230] Bluetooth: hci9: Injecting HCI hardware error event [ 2143.281887][ T5230] Bluetooth: hci9: hardware error 0x00 [ 2143.584515][T28575] pim6reg: entered allmulticast mode [ 2144.421602][ T51] usb 3-1: USB disconnect, device number 33 [ 2145.154103][ T5233] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2145.168402][ T5233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2145.321778][ T5233] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2145.337215][ T5233] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2145.341717][ T5230] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 2145.346252][ T5233] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2145.358606][ T5233] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2145.831997][ T5283] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2146.060163][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 2146.136594][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.188629][ T5283] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 2146.255489][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.339848][ T5283] usb 5-1: config 0 descriptor?? [ 2146.401047][T28621] xt_limit: Overflow, try lower: 0/0 [ 2146.668501][T10655] usb 5-1: USB disconnect, device number 15 [ 2146.830601][T28610] chnl_net:caif_netlink_parms(): no params data found [ 2147.511946][ T5233] Bluetooth: hci11: command tx timeout [ 2147.627141][T28610] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.671990][T28610] bridge0: port 1(bridge_slave_0) entered disabled state [ 2147.700387][T28610] bridge_slave_0: entered allmulticast mode [ 2147.742750][T28610] bridge_slave_0: entered promiscuous mode [ 2147.779687][T28610] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.809680][T28610] bridge0: port 2(bridge_slave_1) entered disabled state [ 2147.852988][T28610] bridge_slave_1: entered allmulticast mode [ 2147.881839][T28610] bridge_slave_1: entered promiscuous mode [ 2148.053977][T28610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2148.089191][T28610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2148.281757][T18578] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2148.290982][T28657] xt_limit: Overflow, try lower: 0/0 [ 2148.345922][T28610] team0: Port device team_slave_0 added [ 2148.383451][T28610] team0: Port device team_slave_1 added [ 2148.521775][T18578] usb 5-1: Using ep0 maxpacket: 16 [ 2148.552960][T18578] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 2148.592627][T18578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2148.628416][T28661] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 2148.632257][T28610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2148.649192][T18578] usb 5-1: Product: syz [ 2148.651578][T22897] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2148.669725][T18578] usb 5-1: Manufacturer: syz [ 2148.702149][T18578] usb 5-1: SerialNumber: syz [ 2148.709148][T28610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2148.773290][T18578] usb 5-1: config 0 descriptor?? [ 2148.830208][T18578] as10x_usb: device has been detected [ 2148.867573][T18578] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 2148.881642][T22897] usb 3-1: Using ep0 maxpacket: 8 [ 2148.897207][T28610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2148.957763][T22897] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2148.966745][T18578] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 2149.022173][T22897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2149.082981][T28610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2149.089969][T28610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2149.091623][T22897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2149.245574][T18578] as10x_usb: error during firmware upload part1 [ 2149.265992][T22897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2149.266376][T18578] Registered device PCTV Systems picoStick (74e) [ 2149.284957][T28610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2149.336985][T22897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2149.430959][T22897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2149.521635][T22897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.581710][ T5233] Bluetooth: hci11: command tx timeout [ 2149.855884][T28610] hsr_slave_0: entered promiscuous mode [ 2149.905796][T28610] hsr_slave_1: entered promiscuous mode [ 2149.941610][T18578] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2149.948049][T28610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2150.010349][T28610] Cannot create hsr debugfs directory [ 2150.164406][T18578] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 2150.274045][T22897] usb 3-1: GET_CAPABILITIES returned df [ 2150.306091][T22897] usbtmc 3-1:16.0: can't read capabilities [ 2150.311498][T18578] usb 4-1: config 0 has no interface number 0 [ 2150.371715][T18578] usb 4-1: too many endpoints for config 0 interface 99 altsetting 97: 115, using maximum allowed: 30 [ 2150.448198][T18578] usb 4-1: config 0 interface 99 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 2150.466046][T18578] usb 4-1: config 0 interface 99 has no altsetting 0 [ 2150.490601][T18578] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2150.524566][T18578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.561538][T18578] usb 4-1: Product: syz [ 2150.571890][T18578] usb 4-1: Manufacturer: syz [ 2150.590485][T18578] usb 4-1: SerialNumber: syz [ 2150.645461][T18578] usb 4-1: config 0 descriptor?? [ 2150.902334][T18578] ch341 4-1:0.99: ch341-uart converter detected [ 2150.964714][T18578] usb 4-1: failed to receive control message: -71 [ 2150.984233][T18578] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2151.046112][T18578] usb 4-1: USB disconnect, device number 17 [ 2151.080987][T18578] ch341 4-1:0.99: device disconnected [ 2151.152791][ T5283] usb 5-1: USB disconnect, device number 16 [ 2151.210246][ T5283] Unregistered device PCTV Systems picoStick (74e) [ 2151.218565][ T5283] as10x_usb: device has been disconnected [ 2151.289099][T28610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.607734][T28610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.673549][T23373] Bluetooth: hci11: command tx timeout [ 2151.726633][T28680] FAULT_INJECTION: forcing a failure. [ 2151.726633][T28680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2151.865396][T28680] CPU: 1 UID: 0 PID: 28680 Comm: syz.3.4739 Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 2151.876206][T28680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2151.886256][T28680] Call Trace: [ 2151.889527][T28680] [ 2151.892451][T28680] dump_stack_lvl+0x241/0x360 [ 2151.897151][T28680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2151.902365][T28680] ? __pfx__printk+0x10/0x10 [ 2151.906970][T28680] ? snprintf+0xda/0x120 [ 2151.911211][T28680] should_fail_ex+0x3b0/0x4e0 [ 2151.915908][T28680] _copy_to_user+0x2f/0xb0 [ 2151.920330][T28680] simple_read_from_buffer+0xca/0x150 [ 2151.925712][T28680] proc_fail_nth_read+0x1ec/0x260 [ 2151.930738][T28680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2151.936276][T28680] ? rw_verify_area+0x520/0x6b0 [ 2151.941120][T28680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2151.946658][T28680] vfs_read+0x204/0xbc0 [ 2151.950806][T28680] ? __pfx_j1939_sk_setsockopt+0x10/0x10 [ 2151.956432][T28680] ? do_sock_setsockopt+0x3e2/0x720 [ 2151.961622][T28680] ? __pfx_vfs_read+0x10/0x10 [ 2151.966289][T28680] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2151.971831][T28680] ? __pfx_j1939_sk_setsockopt+0x10/0x10 [ 2151.977456][T28680] ? do_sock_setsockopt+0x3e2/0x720 [ 2151.982650][T28680] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2151.988195][T28680] ksys_read+0x1a0/0x2c0 [ 2151.992433][T28680] ? __pfx_ksys_read+0x10/0x10 [ 2151.997188][T28680] ? do_syscall_64+0x100/0x230 [ 2152.001942][T28680] ? do_syscall_64+0xb6/0x230 [ 2152.006608][T28680] do_syscall_64+0xf3/0x230 [ 2152.011101][T28680] ? clear_bhb_loop+0x35/0x90 [ 2152.015772][T28680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.021667][T28680] RIP: 0033:0x7f46d8f788bc [ 2152.026090][T28680] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2152.045688][T28680] RSP: 002b:00007f46d9cfc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2152.054093][T28680] RAX: ffffffffffffffda RBX: 00007f46d9115f80 RCX: 00007f46d8f788bc [ 2152.062056][T28680] RDX: 000000000000000f RSI: 00007f46d9cfc0a0 RDI: 0000000000000004 [ 2152.070014][T28680] RBP: 00007f46d9cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 2152.077975][T28680] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 2152.085944][T28680] R13: 0000000000000000 R14: 00007f46d9115f80 R15: 00007f46d923fa38 [ 2152.093921][T28680] [ 2152.105168][T28610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.395702][T28610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2152.471538][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 2152.777156][T28686] ɶƣ0GC: entered promiscuous mode [ 2152.891627][T28687] xt_limit: Overflow, try lower: 0/0 [ 2152.957341][ T5283] usb 3-1: USB disconnect, device number 34 [ 2153.131675][ T51] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 2153.203864][T28610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2153.321665][ T51] usb 5-1: device descriptor read/64, error -71 [ 2153.356247][T28610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2153.417732][T28610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2153.500027][T28610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2153.601610][ T51] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 2153.742952][ T5233] Bluetooth: hci11: command tx timeout [ 2153.811522][ T51] usb 5-1: device descriptor read/64, error -71 [ 2153.930351][T28696] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4743'. [ 2153.941016][ T51] usb usb5-port1: attempt power cycle [ 2154.113456][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4743'. [ 2154.193904][T28610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2154.289158][T28610] 8021q: adding VLAN 0 to HW filter on device team0 [ 2154.372048][ T51] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 2154.471575][ T51] usb 5-1: device descriptor read/8, error -71 [ 2154.690454][T15227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2154.697657][T15227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2154.811608][ T51] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2154.895884][ T51] usb 5-1: device descriptor read/8, error -71 [ 2155.062514][ T51] usb usb5-port1: unable to enumerate USB device [ 2155.397539][ T967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.611865][T18578] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2155.751344][ T967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.926652][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.933913][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.208120][ T967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.377627][T28714] xt_limit: Overflow, try lower: 0/0 [ 2156.478922][T23373] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2156.492151][T23373] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2156.501680][T23373] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2156.510650][T23373] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2156.529756][T23373] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2156.537605][T23373] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2156.986085][ T967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2157.499949][T28610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.731707][T10655] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2157.965408][T10655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2158.036609][T10655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2158.101798][T10655] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 2158.110878][T10655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2158.122498][ T967] bridge_slave_1: left allmulticast mode [ 2158.128140][ T967] bridge_slave_1: left promiscuous mode [ 2158.140051][T10655] usb 5-1: config 0 descriptor?? [ 2158.209359][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.293607][ T967] bridge_slave_0: left allmulticast mode [ 2158.299270][ T967] bridge_slave_0: left promiscuous mode [ 2158.337500][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.561191][T10655] usbhid 5-1:0.0: can't add hid device: -71 [ 2158.590896][T10655] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2158.621642][ T5233] Bluetooth: hci10: command tx timeout [ 2158.639781][T10655] usb 5-1: USB disconnect, device number 21 [ 2159.761566][ T5284] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2160.024712][ T5284] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2160.068746][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.138422][ T5284] usb 5-1: config 0 descriptor?? [ 2160.630421][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.636926][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.701944][ T5233] Bluetooth: hci10: command tx timeout [ 2160.744105][T28757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.785074][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2160.884129][T28757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2161.040400][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2161.051850][ T5284] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 2161.058927][ T5284] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 2161.205014][ T967] bond0 (unregistering): Released all slaves [ 2161.797869][ T5283] usb 5-1: USB disconnect, device number 22 [ 2162.051983][T28719] chnl_net:caif_netlink_parms(): no params data found [ 2162.211893][T28610] veth0_vlan: entered promiscuous mode [ 2162.781929][ T5233] Bluetooth: hci10: command tx timeout [ 2163.436487][ T967] hsr_slave_0: left promiscuous mode [ 2163.513161][ T967] hsr_slave_1: left promiscuous mode [ 2163.594432][T18578] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2163.611857][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.643378][ T967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.734160][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.755372][ T967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.791653][T18578] usb 4-1: Using ep0 maxpacket: 32 [ 2163.809811][T18578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.831033][T18578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2163.871678][T18578] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2163.904965][T18578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.942624][T18578] usb 4-1: config 0 descriptor?? [ 2163.957155][T18578] hub 4-1:0.0: USB hub found [ 2163.981706][ T967] veth1_macvtap: left promiscuous mode [ 2163.987278][ T967] veth0_macvtap: left promiscuous mode [ 2164.012489][ T967] veth1_vlan: left promiscuous mode [ 2164.028092][ T967] veth0_vlan: left promiscuous mode [ 2164.160784][T18578] hub 4-1:0.0: 1 port detected [ 2164.862175][ T5233] Bluetooth: hci10: command tx timeout [ 2164.978010][T18578] hub 4-1:0.0: activate --> -90 [ 2164.991644][ T5283] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2164.999200][T18578] usb 4-1: USB disconnect, device number 19 [ 2166.778959][ T967] team0 (unregistering): Port device team_slave_1 removed [ 2167.095818][ T967] team0 (unregistering): Port device team_slave_0 removed [ 2170.232173][T28811] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 2170.315479][T28610] veth1_vlan: entered promiscuous mode [ 2171.038169][T28610] veth0_macvtap: entered promiscuous mode [ 2171.101319][T28719] bridge0: port 1(bridge_slave_0) entered blocking state [ 2171.132058][T28719] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.140951][T28719] bridge_slave_0: entered allmulticast mode [ 2171.231838][T28719] bridge_slave_0: entered promiscuous mode [ 2171.288415][T28719] bridge0: port 2(bridge_slave_1) entered blocking state [ 2171.333581][T28719] bridge0: port 2(bridge_slave_1) entered disabled state [ 2171.340901][T28719] bridge_slave_1: entered allmulticast mode [ 2171.393189][T28719] bridge_slave_1: entered promiscuous mode [ 2171.631413][T28610] veth1_macvtap: entered promiscuous mode [ 2172.022042][T28825] wireguard0: entered promiscuous mode [ 2172.027566][T28825] wireguard0: entered allmulticast mode [ 2172.521658][ T5283] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2172.652114][T28719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2172.707493][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.771847][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.791471][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.801321][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.817228][ T5283] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2172.834399][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.853300][ T5283] usb 5-1: config 0 descriptor?? [ 2172.862404][ T5283] pwc: Askey VC010 type 2 USB webcam detected. [ 2172.882920][T23373] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2172.905143][T23373] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2172.923496][T23373] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2172.931192][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.973695][T23373] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2172.992172][T23373] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2173.001941][T23373] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2173.059509][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.119274][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.123303][ T5283] pwc: send_video_command error -71 [ 2173.154838][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.161461][ T5283] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2173.192290][ T5283] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2173.206949][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.250099][ T5283] usb 5-1: USB disconnect, device number 23 [ 2173.250561][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.301556][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.323248][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.361717][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.383692][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.410827][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.451209][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.474390][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.502380][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.522137][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.572444][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.591504][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.621490][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2173.651631][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2173.702296][T28610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2173.745528][T28719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2173.833343][ T5283] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2174.056651][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.111268][ T5283] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2174.134295][T28719] team0: Port device team_slave_0 added [ 2174.162582][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.173600][ T5283] usb 5-1: config 0 descriptor?? [ 2174.188230][ T5283] pwc: Askey VC010 type 2 USB webcam detected. [ 2174.203751][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.273850][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.311501][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.347587][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.372500][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.441544][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.471551][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.494878][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.522135][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.561534][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.581504][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.603187][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.623319][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.652756][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.681889][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.706350][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.706862][ T5283] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2174.774809][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.799950][ T5283] pwc: recv_control_msg error -32 req 02 val 2700 [ 2174.813362][ T5283] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2174.841950][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.871622][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.901620][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2174.901650][T28847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.934990][T28610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2174.972814][T28610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2175.002435][T28847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.003668][T28610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2175.066337][T28610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2175.100760][T28847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.110023][ T5233] Bluetooth: hci8: command tx timeout [ 2175.141650][T28610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2175.150382][T28610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2175.226185][T28610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2175.270752][T28847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.307924][ T5283] pwc: recv_control_msg error -32 req 04 val 1000 [ 2175.319468][T28719] team0: Port device team_slave_1 added [ 2175.330928][ T5283] pwc: recv_control_msg error -32 req 04 val 1300 [ 2175.690756][T28719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.699591][T28719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.731199][T28719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.924543][T28719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.970337][T28719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2176.129476][T28719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2176.483250][ T5283] pwc: recv_control_msg error -71 req 04 val 1400 [ 2176.542099][ T5283] pwc: recv_control_msg error -71 req 02 val 2000 [ 2176.571699][ T5283] pwc: recv_control_msg error -71 req 02 val 2100 [ 2176.612247][ T5283] pwc: recv_control_msg error -71 req 04 val 1500 [ 2176.652636][ T5283] pwc: recv_control_msg error -71 req 02 val 2500 [ 2176.673621][ T5283] pwc: recv_control_msg error -71 req 02 val 2400 [ 2176.681604][ T5283] pwc: recv_control_msg error -71 req 02 val 2600 [ 2176.683895][T28869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2176.691526][ T5283] pwc: recv_control_msg error -71 req 02 val 2900 [ 2176.705350][ T5283] pwc: recv_control_msg error -71 req 02 val 2800 [ 2176.716532][ T5283] pwc: recv_control_msg error -71 req 04 val 1100 [ 2176.737772][ T5283] pwc: recv_control_msg error -71 req 04 val 1200 [ 2176.797489][ T5283] pwc: Registered as video71. [ 2176.842616][ T5283] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input199 [ 2176.962112][ T5283] usb 5-1: USB disconnect, device number 24 [ 2177.082010][ T967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.181961][ T5233] Bluetooth: hci8: command tx timeout [ 2177.476476][T28719] hsr_slave_0: entered promiscuous mode [ 2177.503120][T28719] hsr_slave_1: entered promiscuous mode [ 2177.511667][T28719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2177.607209][T28719] Cannot create hsr debugfs directory [ 2178.047761][ T967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.291708][ T5288] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2178.308842][ T967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.446671][T15227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2178.482042][ T5288] usb 5-1: too many configurations: 164, using maximum allowed: 8 [ 2178.493567][T15227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2178.537071][ T5288] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 2178.596404][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.650966][ T967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.662324][ T5288] usb 5-1: config 0 descriptor?? [ 2178.682013][ T5288] usb 5-1: bad CDC descriptors [ 2178.899700][T26169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2178.909243][T10655] usb 5-1: USB disconnect, device number 25 [ 2178.949695][T26169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2178.985436][T28846] chnl_net:caif_netlink_parms(): no params data found [ 2179.263820][ T5233] Bluetooth: hci8: command tx timeout [ 2179.740841][ T967] bridge_slave_1: left allmulticast mode [ 2179.746928][ T967] bridge_slave_1: left promiscuous mode [ 2179.754562][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.913060][ T967] bridge_slave_0: left allmulticast mode [ 2179.925289][ T967] bridge_slave_0: left promiscuous mode [ 2179.949075][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.091971][T28910] binder: 28905:28910 ioctl c0306201 20000080 returned -14 [ 2180.528076][ T5288] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2180.809908][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2180.861739][ T5288] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2180.911541][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2180.957992][ T5288] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2181.006342][ T5288] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2181.021791][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.031686][ T5288] usb 5-1: Product: syz [ 2181.035842][ T5288] usb 5-1: Manufacturer: syz [ 2181.040412][ T5288] usb 5-1: SerialNumber: syz [ 2181.128581][ T5288] usb 5-1: config 0 descriptor?? [ 2181.218747][ T5288] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 2181.352336][ T5233] Bluetooth: hci8: command tx timeout [ 2181.911645][T15984] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2182.152459][T15984] usb 3-1: Using ep0 maxpacket: 32 [ 2182.198650][T15984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2182.250790][T15984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2182.297233][T15984] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2182.353112][T15984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.415029][T15984] usb 3-1: config 0 descriptor?? [ 2182.554711][T15984] hub 3-1:0.0: USB hub found [ 2182.668282][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2182.749280][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.817934][ T967] bond0 (unregistering): Released all slaves [ 2182.991052][T15984] hub 3-1:0.0: 1 port detected [ 2183.500418][ T5288] scsi host1: usb-storage 5-1:0.0 [ 2183.591836][ T5288] usb 5-1: USB disconnect, device number 26 [ 2183.669434][ T5233] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 2183.678721][ T5233] Bluetooth: hci11: Injecting HCI hardware error event [ 2183.688635][T23373] Bluetooth: hci11: hardware error 0x00 [ 2184.081660][T15984] usb 3-1: USB disconnect, device number 35 [ 2185.323788][T28846] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.354000][T28846] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.406257][T28846] bridge_slave_0: entered allmulticast mode [ 2185.440583][T28846] bridge_slave_0: entered promiscuous mode [ 2185.665292][ T967] hsr_slave_0: left promiscuous mode [ 2185.692776][ T967] hsr_slave_1: left promiscuous mode [ 2185.822855][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2185.859152][ T967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2185.901686][T23373] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 2185.940681][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2185.992230][ T967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2186.115559][ T967] veth1_macvtap: left promiscuous mode [ 2186.131577][ T967] veth0_macvtap: left promiscuous mode [ 2186.152144][ T967] veth1_vlan: left promiscuous mode [ 2186.157450][ T967] veth0_vlan: left promiscuous mode [ 2186.675407][ T967] pim6reg (unregistering): left allmulticast mode [ 2186.873819][ T30] INFO: task syz.3.4520:27537 blocked for more than 143 seconds. [ 2186.893683][ T30] Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 2186.929907][T28948] binder: 28946:28948 ioctl c0306201 20000080 returned -14 [ 2186.945519][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2186.982184][ T30] task:syz.3.4520 state:D stack:27360 pid:27537 tgid:27525 ppid:20663 flags:0x00000004 [ 2187.054098][ T30] Call Trace: [ 2187.061920][ T30] [ 2187.069687][ T30] __schedule+0x1800/0x4a60 [ 2187.134150][ T30] ? __pfx___schedule+0x10/0x10 [ 2187.184801][ T30] ? __pfx_lock_release+0x10/0x10 [ 2187.189854][ T30] ? __mutex_trylock_common+0x92/0x2e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2187.234381][ T30] ? schedule+0x90/0x320 [ 2187.238692][ T30] schedule+0x14b/0x320 [ 2187.298109][ T30] schedule_preempt_disabled+0x13/0x30 [ 2187.334997][ T30] __ww_mutex_lock+0xec2/0x2790 [ 2187.339915][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 2187.391512][ T30] ? drm_modeset_lock+0x6f/0x90 [ 2187.411488][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 2187.416841][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 2187.483235][ T30] ww_mutex_lock+0x40/0x1f0 [ 2187.487767][ T30] ? drm_modeset_lock+0x65/0x90 [ 2187.521547][ T30] drm_modeset_lock+0x6f/0x90 [ 2187.551675][ T30] drm_mode_getplane+0xf0/0x7a0 [ 2187.561482][ T30] drm_ioctl_kernel+0x33a/0x440 [ 2187.571923][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 2187.577409][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2187.611523][ T30] ? __might_fault+0xc6/0x120 [ 2187.616260][ T30] drm_ioctl+0x611/0xad0 [ 2187.620498][ T30] ? __pfx_drm_mode_getplane+0x10/0x10 [ 2187.662042][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 2187.666844][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2187.691491][ T30] ? security_file_ioctl+0x87/0xb0 [ 2187.731538][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 2187.736366][ T30] __se_sys_ioctl+0xfc/0x170 [ 2187.740981][ T30] do_syscall_64+0xf3/0x230 [ 2187.781696][ T30] ? clear_bhb_loop+0x35/0x90 [ 2187.819219][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.833153][ T30] RIP: 0033:0x7f7075579e79 [ 2187.837607][ T30] RSP: 002b:00007f7074bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2187.881621][ T30] RAX: ffffffffffffffda RBX: 00007f7075716208 RCX: 00007f7075579e79 [ 2187.889622][ T30] RDX: 00000000200003c0 RSI: 00000000c02064b6 RDI: 000000000000000b [ 2187.938314][ T30] RBP: 00007f70755e793e R08: 0000000000000000 R09: 0000000000000000 [ 2188.003983][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2188.041969][ T30] R13: 0000000000000000 R14: 00007f7075716208 R15: 00007f707583fa38 [ 2188.068270][ T30] [ 2188.080914][ T30] [ 2188.080914][ T30] Showing all locks held in the system: [ 2188.098166][ T30] 1 lock held by khungtaskd/30: [ 2188.121456][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2188.156974][ T30] 5 locks held by kworker/u8:5/967: [ 2188.191812][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2188.211531][ T30] #1: ffffc90003bafd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2188.263684][ T30] #2: ffffffff8fc77f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 2188.301791][ T30] #3: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 2188.331612][ T30] #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2188.377157][ T30] 2 locks held by kworker/1:2/1857: [ 2188.401632][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2188.451471][ T30] #1: ffffc900048f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2188.471473][ T30] 3 locks held by kworker/u8:8/2914: [ 2188.491875][ T30] #0: ffff88802afc1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2188.541453][ T30] #1: ffffc9000971fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2188.611455][ T30] #2: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 2188.620940][ T30] 2 locks held by dhcpcd/4897: [ 2188.671683][ T30] #0: ffff88806a455678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 2188.691456][ T30] #1: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 2188.700332][ T30] 2 locks held by getty/4979: [ 2188.741453][ T30] #0: ffff88802ba5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2188.751293][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 2188.803531][ T30] 1 lock held by syz.1.1087/9310: [ 2188.808608][ T30] 1 lock held by syz.2.1204/10117: [ 2188.831590][ T30] 3 locks held by kworker/u8:1/26169: [ 2188.837003][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 2188.901498][ T30] #1: ffffc900031d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 2188.931650][ T30] #2: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2188.940704][ T30] 3 locks held by syz.2.4506/27459: [ 2189.001455][ T30] 1 lock held by syz.3.4520/27537: [ 2189.006617][ T30] #0: ffff8880204dc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 2189.032283][ T30] 1 lock held by syz.4.4650/28100: [ 2189.037431][ T30] #0: ffff8880204dc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 2189.091242][ T30] 1 lock held by syz-executor/28137: [ 2189.098457][ T30] #0: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 2189.141457][ T30] 1 lock held by syz.0.4655/28148: [ 2189.146611][ T30] #0: ffff8880204dc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 2189.201458][ T30] 1 lock held by syz.1.4681/28505: [ 2189.221456][ T30] #0: ffff8880204dc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 2189.261450][ T30] 7 locks held by syz-executor/28719: [ 2189.273016][ T30] #0: ffff88801ed66420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 2189.303037][ T30] #1: ffff888165bb7888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 2189.331464][ T30] #2: ffff888021a1a968 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 2189.351452][ T30] #3: ffffffff8f5210a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 2189.391454][ T30] #4: ffff8880548370e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 2189.451450][ T30] #5: ffff888026119250 (&devlink->lock_key#95){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 2189.471454][ T30] #6: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: unregister_nexthop_notifier+0x17/0x40 [ 2189.502059][ T30] 1 lock held by syz-executor/28846: [ 2189.507351][ T30] #0: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 2189.561451][ T30] 1 lock held by syz.1.4799/28945: [ 2189.566598][ T30] #0: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 2189.591452][ T30] 3 locks held by syz.4.4800/28947: [ 2189.596688][ T30] #0: ffff88806b26cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2189.651451][ T30] #1: ffff88806b26c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2189.661197][ T30] #2: ffffffff8fdf05e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2189.771525][ T30] [ 2189.774008][ T30] ============================================= [ 2189.774008][ T30] [ 2189.802280][ T30] NMI backtrace for cpu 1 [ 2189.806650][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 2189.817167][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2189.827224][ T30] Call Trace: [ 2189.830492][ T30] [ 2189.833411][ T30] dump_stack_lvl+0x241/0x360 [ 2189.838073][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2189.843250][ T30] ? __pfx__printk+0x10/0x10 [ 2189.847822][ T30] ? vprintk_emit+0x667/0x7c0 [ 2189.852483][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 2189.857487][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2189.862414][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2189.867855][ T30] ? _printk+0xd5/0x120 [ 2189.871995][ T30] ? __pfx__printk+0x10/0x10 [ 2189.876567][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2189.881398][ T30] ? __pfx__printk+0x10/0x10 [ 2189.885984][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2189.890990][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2189.896981][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2189.902952][ T30] watchdog+0xff4/0x1040 [ 2189.907203][ T30] ? watchdog+0x1ea/0x1040 [ 2189.911641][ T30] ? __pfx_watchdog+0x10/0x10 [ 2189.916347][ T30] kthread+0x2f0/0x390 [ 2189.920430][ T30] ? __pfx_watchdog+0x10/0x10 [ 2189.925095][ T30] ? __pfx_kthread+0x10/0x10 [ 2189.929701][ T30] ret_from_fork+0x4b/0x80 [ 2189.934116][ T30] ? __pfx_kthread+0x10/0x10 [ 2189.938692][ T30] ret_from_fork_asm+0x1a/0x30 [ 2189.943458][ T30] [ 2189.948123][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2189.954087][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 2190.140286][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2190.147170][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00015-g3e9bff3bbe13 #0 [ 2190.157650][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2190.167686][ T30] Call Trace: [ 2190.170951][ T30] [ 2190.173865][ T30] dump_stack_lvl+0x241/0x360 [ 2190.178527][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2190.183708][ T30] ? __pfx__printk+0x10/0x10 [ 2190.188278][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2190.194245][ T30] ? vscnprintf+0x5d/0x90 [ 2190.198556][ T30] panic+0x349/0x860 [ 2190.202441][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2190.208576][ T30] ? __pfx_panic+0x10/0x10 [ 2190.212985][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2190.218372][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2190.223946][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2190.229334][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2190.235477][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2190.241618][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2190.247756][ T30] watchdog+0x1033/0x1040 [ 2190.252074][ T30] ? watchdog+0x1ea/0x1040 [ 2190.256474][ T30] ? __pfx_watchdog+0x10/0x10 [ 2190.261131][ T30] kthread+0x2f0/0x390 [ 2190.265190][ T30] ? __pfx_watchdog+0x10/0x10 [ 2190.269848][ T30] ? __pfx_kthread+0x10/0x10 [ 2190.274423][ T30] ret_from_fork+0x4b/0x80 [ 2190.278821][ T30] ? __pfx_kthread+0x10/0x10 [ 2190.283395][ T30] ret_from_fork_asm+0x1a/0x30 [ 2190.288149][ T30] [ 2190.291376][ T30] Kernel Offset: disabled [ 2190.295688][ T30] Rebooting in 86400 seconds..