last executing test programs: 14.068727162s ago: executing program 2 (id=1937): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0xffffff8c) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)=0x1) 13.84115675s ago: executing program 2 (id=1939): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000440)=""/98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x8, 0x5, &(0x7f0000000180)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff1f}]}, &(0x7f00000005c0)='GPL\x00', 0x2}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(r1, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x1a, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r5], 0xfd84}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x32148a}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x880}, 0x0) epoll_create1(0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d793000000000000000020000b4b16e1ee39b0f0e2ccf5d102307f55bb75c5bfd8d91698017320f81a6c920f7fe27fbea436a62e5740e2fcf3b54270e71b17b701e3b97910c6845fda12f7c5245b5306497c12c8bb61d7a545479bbca1c1f87764bd665ec171d767905d0309b1a0655f9e9cad832f405aede72daf3e15a298debc38cf6935c97"], 0x3c}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 13.601729621s ago: executing program 2 (id=1941): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000a40)='./file0\x00', &(0x7f0000010140), &(0x7f0000000000)=@v3={0x3000000, [{0x7, 0xfffffffa}, {0x2, 0x3}], r2}, 0x18, 0x0) 13.359513572s ago: executing program 2 (id=1944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x0, 0x0, 0x0, 0x6}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2800330080000000ffffffffffff080211"], 0x44}}, 0x0) 13.009326109s ago: executing program 2 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x4e22, @empty}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.007328764s ago: executing program 4 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0xa8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_b, @initial, {0x0, 0x3}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x7}}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0c, 0xfac0b]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}]]}, 0xa8}, 0x1, 0x0, 0x0, 0xfe3685db0afff645}, 0x0) 7.220114833s ago: executing program 4 (id=1977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b80)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}, {@in=@local, 0x0, 0x2b}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(serpent)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_emit_ethernet(0x23e, &(0x7f0000001340)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x208, 0x21, 0x0, @dev, @local, {[@hopopts={0xc, 0x1a, '\x00', [@generic={0x8, 0xd1, "f0748159964ea3ccf813fa0ecbbaa55283480288ba04f541885318a2ef2e06393a1a576a2bacccdbe1cadc1b527892103f809469ccf2a19912304646eef6a2f9d502fbc27f42c06d132459b046661629447534fbf629b6dbcd23448f433827bfa590d6616b0f78dc9306ef92868439720aace48e6fa88a597906ac03f17df066814177023768189b76bb2bbb9fa7d837419a9bdfdc262b2424090956b4383276a11fddb12ffb167a39e32e8a809fb3ad602478afd70d05c1d879d29b4fe033ed407000821b12d92352dd1efbf4ef1cbec1"}]}, @fragment={0x62, 0x0, 0x7, 0x0, 0x0, 0x5, 0x67}, @routing={0x0, 0xe, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @private0, @private0]}, @dstopts={0x0, 0xc, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @padn, @enc_lim, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x0, 0x5, '\x00', [@pad1, @jumbo, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x0, [0x0, 0xff83, 0x4]}}]}]}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="48d883ffb9204847baa0a4fd1300020010f5044bab6a1ce05c5b771e7bdea6002300000000", @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000001580), 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000002c0)=""/4083, 0xff3}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3, 0x0, 0x6000}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/243, 0xf3}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f0000001840)=""/202, 0x107}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000080)=""/114, 0x72}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000001940)=ANY=[@ANYBLOB="a08d8b2dbce8e9a6961101c219980100001634e1d90ab456f7b6a196b2aff2d7300f5234b7c4a5c629b51fd0d522b00ad73a5f8774c382b10b6f58971e3d0c227ea1155a1712c684d3f95ff66a210a43b414e32449b3773421373ebe5915714c59f895b0", @ANYRES16=r6, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x880}, 0x80) r7 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x40000) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @loopback}, &(0x7f0000000180)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 6.359151216s ago: executing program 1 (id=1987): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000000000/0x400000)=nil, 0x800000}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000018000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000b174a0b14a445f08c94eaf1141c2a205f7af5ad29c31c20b497ecdfa50fd8899d82e12622c1dbd4d932feaaf1b5f24c2f5e207afcdd4e0132efd7b2b1d672e", @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08000500"], 0x24}}, 0x0) 6.171755388s ago: executing program 4 (id=1988): socket(0x10, 0x3, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x2, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x181cd3cd, 0x696d]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3a}}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x6}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) syz_io_uring_setup(0x2ee1, &(0x7f0000000080)={0x0, 0x401, 0x1, 0x0, 0x161, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824d3a86d33d649ba393dc2987eff03845eadc51457e4445c"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000019c40)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @device_b, @from_mac=@broadcast, {0xc, 0x4c}}, 0x8, 0x65, @random=0xfffb, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x8001, 0x5a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xde9, 0x6}}, [{0xdd, 0x30, "ddff9bf38d79866557f7a9004bbaa831f06b7900df77288eaef2442a08d386eb4864a987f0202c9f5512b7de08ed484d"}, {0xdd, 0x6, "e767cc2f27c0"}, {0xdd, 0x7f, "61bfb88bd0763c7640d3a85fef407286e413d2a9f6d929df09ae77208afbfa6f28a1fd905690cc33b2fd656b11d51157f8f35b9773089a1d9d5a44174befe524b91bc78224a01d341224ebdb964c076815483ddde1f4b452daec3209078c95250ab538532420b9fd6d6d0c23dd8c832d2e4c23359a98d35223ff80a0a3c1d5"}, {0xdd, 0x60, "b71a42dd4fde05eeacd6587e4020b558ce511ea364e70969ed81e11e8d7e5d32f4e233312e0bfd7ddd5d6f98eead0d4c4bbbe2b00afd25bde02d50fcd8e78abecb84527f59b47a6df1c71faaac08a364547a0930340172eb8bac0c469a72a534"}, {0xdd, 0x7a, "a64a105856cead9631b7d544bce02715ac7b02a990d0a93ad34ab6578d866f5027c0069262c6ec1391abf9eeac093e71425bc41e55f1f21093c33af04f6074f1cbd4c7b35e3b85a0ac3ffdd602c6e3395c613e2fb80dd80c001bfdfc840a66366100337bec0973aa5876ba5eaa47d55a89bd9bf9641dfdaa744b"}]}, 0x1d3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x20000006}) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "623eebe039a1f617fd02722e3486ebd9"}, @md5sig={0x1d, 0x12}]}}}}}}}, 0x0) 6.050080725s ago: executing program 0 (id=1990): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 5.232256378s ago: executing program 0 (id=1992): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', './file0/file0', [{0x20, '#! e.\x17uj\xff'}], 0xa, "251d5c258693f808b835a06cca0aa09f8bb07fc93d0458f6c678e50f36facb2d39f74482c0bdfe386c00000000ddc3981b75d0a4a4b80a6ad9550c9d0c4b2da9c3a9fd1cdcbca51869ff185d4686975414595687195c"}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 4.41476008s ago: executing program 4 (id=1994): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "3cda094f"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 4.171693921s ago: executing program 0 (id=1996): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000100)=0x1, 0xc06620, 0x4) read(r0, &(0x7f00000001c0)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0), 0xc06620, 0x4) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x2000, 0x2}) 3.746407935s ago: executing program 3 (id=1998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) 3.363852503s ago: executing program 3 (id=1999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b80)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}, {@in=@local, 0x0, 0x2b}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(serpent)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_emit_ethernet(0x23e, &(0x7f0000001340)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x208, 0x21, 0x0, @dev, @local, {[@hopopts={0xc, 0x1a, '\x00', [@generic={0x8, 0xd1, "f0748159964ea3ccf813fa0ecbbaa55283480288ba04f541885318a2ef2e06393a1a576a2bacccdbe1cadc1b527892103f809469ccf2a19912304646eef6a2f9d502fbc27f42c06d132459b046661629447534fbf629b6dbcd23448f433827bfa590d6616b0f78dc9306ef92868439720aace48e6fa88a597906ac03f17df066814177023768189b76bb2bbb9fa7d837419a9bdfdc262b2424090956b4383276a11fddb12ffb167a39e32e8a809fb3ad602478afd70d05c1d879d29b4fe033ed407000821b12d92352dd1efbf4ef1cbec1"}]}, @fragment={0x62, 0x0, 0x7, 0x0, 0x0, 0x5, 0x67}, @routing={0x0, 0xe, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @private0, @private0]}, @dstopts={0x0, 0xc, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @padn, @enc_lim, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x0, 0x5, '\x00', [@pad1, @jumbo, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x0, [0x0, 0xff83, 0x4]}}]}]}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="48d883ffb9204847baa0a4fd1300020010f5044bab6a1ce05c5b771e7bdea60023", @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000002c0)=""/4083, 0xff3}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3, 0x0, 0x6000}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/243, 0xf3}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f0000001840)=""/202, 0x107}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000080)=""/114, 0x72}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000001940)=ANY=[@ANYBLOB="a08d8b2dbce8e9a6961101c219980100001634e1d90ab456f7b6a196b2aff2d7300f5234b7c4a5c629b51fd0d522b00ad73a5f8774c382b10b6f58971e3d0c227ea1155a1712c684d3f95ff66a210a43b414e32449b3773421373ebe5915714c59f895b0", @ANYRES16=r6, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x880}, 0x80) r7 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x40000) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @loopback}, &(0x7f0000000180)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 3.18386166s ago: executing program 0 (id=2000): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x7279, &(0x7f0000001280)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="1d6b", 0x2}, {&(0x7f00000000c0)="8f5d", 0x2}], 0x2) 2.876722136s ago: executing program 1 (id=2001): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.85182605s ago: executing program 3 (id=2002): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(r0, &(0x7f0000000000)=@unspec={0x0, 0xe803}, 0xc) 2.68034687s ago: executing program 0 (id=2003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000000000008804"]) 2.64458149s ago: executing program 3 (id=2004): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4880, 0x0) 2.291696612s ago: executing program 3 (id=2005): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200002000"}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 2.214398372s ago: executing program 0 (id=2006): sched_setscheduler(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="3b0200", @ANYRES32=0x0, @ANYRES32=0x0], 0x23b) io_setup(0x3, 0x0) syz_open_procfs(0x0, 0x0) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000400)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f69e05e361e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12861b45225bdbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7886d069c0ad7b77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae70200000082f2f1b26dbfd5d3ccd53e714c9ddcd3f33b1d", 0xe2, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r3, r1}, &(0x7f0000000500)=""/219, 0xdb, &(0x7f00000003c0)={&(0x7f0000000200)={'sha384-avx\x00'}}) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1c, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fcntl$setsig(r5, 0xa, 0x21) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030601030000000000000000000000000500010007000000c7dc802651775dfd48dc69bce38abd42893d2fde7ba8fcbf17eeb02e701fec4e91a84fe4293ff25e3af047f3"], 0x1c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000011602120001000000000904010000ffffff00"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 2.179512085s ago: executing program 3 (id=2007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket(0x2a, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) 2.166040958s ago: executing program 4 (id=2008): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffffffff, 0x80, 0x40, 0x28c3, 0xffffffffffffffff, 0x6a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xf}, 0x48) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0xbc, 0x0) 1.692820542s ago: executing program 4 (id=2009): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) 1.176398309s ago: executing program 1 (id=2010): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000180)={{@host}}) 964.744245ms ago: executing program 1 (id=2011): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b80)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}, {@in=@local, 0x0, 0x2b}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(serpent)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_emit_ethernet(0x23e, &(0x7f0000001340)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x208, 0x21, 0x0, @dev, @local, {[@hopopts={0xc, 0x1a, '\x00', [@generic={0x8, 0xd1, "f0748159964ea3ccf813fa0ecbbaa55283480288ba04f541885318a2ef2e06393a1a576a2bacccdbe1cadc1b527892103f809469ccf2a19912304646eef6a2f9d502fbc27f42c06d132459b046661629447534fbf629b6dbcd23448f433827bfa590d6616b0f78dc9306ef92868439720aace48e6fa88a597906ac03f17df066814177023768189b76bb2bbb9fa7d837419a9bdfdc262b2424090956b4383276a11fddb12ffb167a39e32e8a809fb3ad602478afd70d05c1d879d29b4fe033ed407000821b12d92352dd1efbf4ef1cbec1"}]}, @fragment={0x62, 0x0, 0x7, 0x0, 0x0, 0x5, 0x67}, @routing={0x0, 0xe, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @private0, @private0]}, @dstopts={0x0, 0xc, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @padn, @enc_lim, @hao={0xc9, 0x10, @private2}]}, @hopopts={0x0, 0x5, '\x00', [@pad1, @jumbo, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x0, [0x0, 0xff83, 0x4]}}]}]}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="48d883ffb9204847baa0a4fd1300020010f5044bab6a1ce05c5b771e7bdea60023", @ANYRES32=r1, @ANYRES64=r1, @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000002c0)=""/4083, 0xff3}, {&(0x7f00000012c0)=""/119, 0x77}], 0x3, 0x0, 0x6000}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001740)=""/243, 0xf3}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000001680)=""/136, 0x88}, {&(0x7f0000001840)=""/202, 0x107}, {&(0x7f0000002c00)=""/4100, 0x1004}, {&(0x7f0000000080)=""/114, 0x72}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000001940)=ANY=[@ANYBLOB="a08d8b2dbce8e9a6961101c219980100001634e1d90ab456f7b6a196b2aff2d7300f5234b7c4a5c629b51fd0d522b00ad73a5f8774c382b10b6f58971e3d0c227ea1155a1712c684d3f95ff66a210a43b414e32449b3773421373ebe5915714c59f895b0", @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf254c0000000f00a9007365636f6e646e616d6500000c00a6000300000000000000f500a9000a12861e9c85f16bebda23e767f4145a6e932e3d6760b5d289a47823f2a65155143ffe92259b4e1f7af7cff2f6b82da02010fd8db4752f7e7883e49c9a4d3e2d86e8cd31c02d141622e92d77c1809a5a59e790f155319825d84c03ad5f37858379aeda83d03c7cf18579adce3408a00213ba8127c785ae6891d8ba88baa2caa570e25d90082b9cf3c15f0d5e974fe8010819f99c6c3a9a7ce943ee0a4594b75ea84f47f32e19e419cebe84eef7c63387fe1b84151604059139f1e346c759fd4dfdb9dfd47f7b3ef88062f136d1e20921d1d50b9cddf0191ad0dff556115d5c0d703d3da160b8a7d45b9aa284218510a2fd0000000800030000000000080001007063690011000200303030303a30303a31302e30000000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0x198}, 0x1, 0x0, 0x0, 0x880}, 0x80) r7 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x40000) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @loopback}, &(0x7f0000000180)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 510.672117ms ago: executing program 1 (id=2012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf24, 0x0, 0x3, 0x200000006], 0x0, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 400.68003ms ago: executing program 2 (id=1948): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') write$cgroup_int(r1, &(0x7f0000000740), 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x13, &(0x7f0000000640)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x6}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffbfff}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x690000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104000000000300200005000000", @ANYRES32=r8, @ANYBLOB="00000020e8a7a40008000300", @ANYRES16=r6, @ANYRES16=r4], 0x28}, 0x1, 0x8}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x29, 0x1, 0x1, 0xfffffffe}, {}, {0x6, 0x0, 0x0, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000001400), 0x2, 0x24801) syz_emit_ethernet(0x101a, &(0x7f0000002480)=ANY=[@ANYRESDEC=r9], &(0x7f0000000040)={0x0, 0x2, [0xca0, 0x176, 0x329, 0x307]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=2013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000340)=0x1f, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x7, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x2}) kernel console output (not intermixed with test programs): ][ T63] veth0_macvtap: left promiscuous mode [ 1031.281805][ T63] veth1_vlan: left promiscuous mode [ 1031.288540][ T63] veth0_vlan: left promiscuous mode [ 1031.355682][ T5288] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1031.383482][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.410919][ T5288] usb 3-1: config 0 descriptor?? [ 1032.555583][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1032.637874][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1033.204255][T12907] Bluetooth: hci3: command tx timeout [ 1033.672174][T18445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.691222][T18552] netlink: 'syz.2.1727': attribute type 10 has an invalid length. [ 1033.746183][T18552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.758619][T18552] batadv0: entered promiscuous mode [ 1033.766116][T18552] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1033.842688][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.849861][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.878511][T18445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.955312][ T5288] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1033.979451][ T5288] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1033.995250][ T5288] [drm:udl_init] *ERROR* Selecting channel failed [ 1034.121028][T18445] team0: Port device team_slave_0 added [ 1034.148702][ T5288] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1034.165321][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.172536][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.192276][T18556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1729'. [ 1034.212412][ T5288] [drm] Initialized udl on minor 2 [ 1034.215359][T18445] team0: Port device team_slave_1 added [ 1034.231805][ T5288] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1034.279959][ T5288] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1034.381459][ T5288] usb 3-1: USB disconnect, device number 46 [ 1034.389010][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1034.391079][T18445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.424533][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1034.445759][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.495127][T18445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.518819][T18291] veth0_vlan: entered promiscuous mode [ 1034.637044][T18445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.684953][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.721950][T18445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.941796][T18445] hsr_slave_0: entered promiscuous mode [ 1034.965720][T18445] hsr_slave_1: entered promiscuous mode [ 1035.041015][T18291] veth1_vlan: entered promiscuous mode [ 1035.274506][T12907] Bluetooth: hci3: command tx timeout [ 1035.604383][T18291] veth0_macvtap: entered promiscuous mode [ 1035.700955][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.909276][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.933122][T18291] veth1_macvtap: entered promiscuous mode [ 1035.973399][T18322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.033005][T10562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1036.051950][T10562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1036.061355][T10562] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1036.072670][T10562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1036.086006][T10562] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1036.095636][T10562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1036.306362][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.505269][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.616220][T18322] veth0_vlan: entered promiscuous mode [ 1036.642375][T18291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.670626][T18291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.683604][T18291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.701919][T18291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.720433][T18291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.936286][T18291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.995695][T18291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.009714][T18291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.031364][T18291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.048666][T18291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.059358][T18291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.085646][T18291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.111976][T18291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.133889][T18291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.158738][T18291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.194055][T18291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.296580][T18322] veth1_vlan: entered promiscuous mode [ 1037.478289][ T63] bridge_slave_1: left allmulticast mode [ 1037.495072][ T63] bridge_slave_1: left promiscuous mode [ 1037.500958][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.531549][ T63] bridge_slave_0: left allmulticast mode [ 1037.544136][ T63] bridge_slave_0: left promiscuous mode [ 1037.550011][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.246730][T10562] Bluetooth: hci5: command tx timeout [ 1038.281279][ T63] bond0 (unregistering): left promiscuous mode [ 1038.287681][ T63] bond_slave_0: left promiscuous mode [ 1038.293189][ T63] bond_slave_1: left promiscuous mode [ 1038.299782][ T63] batadv0: left promiscuous mode [ 1038.327940][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.342986][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.358843][ T63] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1038.370636][ T63] bond0 (unregistering): Released all slaves [ 1038.383040][ T8] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1038.563908][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1038.573058][ T8] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1038.604235][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.627583][T18445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1038.636130][ T8] usb 1-1: config 0 descriptor?? [ 1038.659071][ T8] usb 1-1: bad CDC descriptors [ 1038.668875][T18445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1038.703777][T18580] chnl_net:caif_netlink_parms(): no params data found [ 1038.719132][T18322] veth0_macvtap: entered promiscuous mode [ 1038.734828][T18445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1038.784857][T18445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1038.850113][T18322] veth1_macvtap: entered promiscuous mode [ 1038.873418][ T58] usb 1-1: USB disconnect, device number 52 [ 1038.896104][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.927446][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.936104][ T63] hsr_slave_0: left promiscuous mode [ 1038.948366][ T63] hsr_slave_1: left promiscuous mode [ 1038.969829][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.980094][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.989540][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.998401][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.025960][ T63] veth1_macvtap: left promiscuous mode [ 1039.031695][ T63] veth0_macvtap: left promiscuous mode [ 1039.038823][ T63] veth1_vlan: left promiscuous mode [ 1039.044409][ T63] veth0_vlan: left promiscuous mode [ 1039.767847][ T58] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1039.858601][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1039.924607][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1039.973096][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 1039.994490][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1040.022971][ T58] usb 1-1: config 125 has an invalid interface number: 179 but max is 0 [ 1040.032557][ T58] usb 1-1: config 125 has no interface number 0 [ 1040.052075][ T58] usb 1-1: config 125 interface 179 has no altsetting 0 [ 1040.062616][ T58] usb 1-1: New USB device found, idVendor=0499, idProduct=101d, bcdDevice=fc.ea [ 1040.084472][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.092504][ T58] usb 1-1: Product: syz [ 1040.097068][ T58] usb 1-1: Manufacturer: syz [ 1040.101754][ T58] usb 1-1: SerialNumber: syz [ 1040.326488][T10562] Bluetooth: hci5: command tx timeout [ 1040.347269][ T58] usb-storage 1-1:125.179: USB Mass Storage device detected [ 1040.420545][ T58] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.472400][ T58] snd-usb-audio 1-1:125.179: probe with driver snd-usb-audio failed with error -2 [ 1040.494143][ T58] usb 1-1: USB disconnect, device number 53 [ 1040.512538][T13386] udevd[13386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:125.179/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.997781][T18580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.027975][T18580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.038070][T18580] bridge_slave_0: entered allmulticast mode [ 1041.057762][T18580] bridge_slave_0: entered promiscuous mode [ 1041.073313][T18322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.089566][T18322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.099783][T18322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1041.115020][T18322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.143173][T18322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1041.175895][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.187857][T18322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.215814][T18628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 1041.223783][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.242766][T18322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.260353][T18322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.290052][T18322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.300234][T18322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1041.317329][T18322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1041.330071][T18322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1041.341464][T18580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.356734][T18580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.386592][T18580] bridge_slave_1: entered allmulticast mode [ 1041.406583][T18580] bridge_slave_1: entered promiscuous mode [ 1041.481122][T18580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.508478][T18580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.523088][T18322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.534548][T18322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.544072][T18322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.557587][T18322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.709309][T18580] team0: Port device team_slave_0 added [ 1041.738629][T18580] team0: Port device team_slave_1 added [ 1041.839480][T18580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.852442][T18580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.882176][T18580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.928738][T18580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.948733][T18580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.987176][T18580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.200432][T18580] hsr_slave_0: entered promiscuous mode [ 1042.213210][T18580] hsr_slave_1: entered promiscuous mode [ 1042.230984][T18580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.239872][T18580] Cannot create hsr debugfs directory [ 1042.391481][ T1079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.403400][T10562] Bluetooth: hci5: command tx timeout [ 1042.453680][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.511827][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.698447][ T1079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.783650][T18445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.799199][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.808348][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.856918][ T1079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.993918][ T5287] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1043.052942][ T1079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.076681][T12907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1043.091465][T12907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1043.103400][T12907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1043.118453][T12907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1043.127472][T12907] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1043.135084][T12907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1043.182382][T18445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.217200][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 1043.239897][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.247109][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.278392][ T5287] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1043.300122][ T5287] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1043.320302][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.327563][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.337456][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1043.363883][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1043.401304][ T5287] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1043.430670][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1043.478112][ T5287] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1043.500008][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.535802][ T5287] usb 5-1: config 0 descriptor?? [ 1043.762008][ T5287] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1043.832064][ T5287] usb 5-1: USB disconnect, device number 54 [ 1043.867410][ T5287] usblp0: removed [ 1044.152541][ T1079] bridge_slave_1: left allmulticast mode [ 1044.199671][ T1079] bridge_slave_1: left promiscuous mode [ 1044.208390][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.235217][ T1079] bridge_slave_0: left allmulticast mode [ 1044.247110][ T1079] bridge_slave_0: left promiscuous mode [ 1044.258833][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.431321][ T5287] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1044.473969][T12907] Bluetooth: hci5: command tx timeout [ 1044.635245][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 1044.666201][ T5287] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1044.681941][ T5287] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1044.706991][ T5287] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1044.717273][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1044.741833][ T5287] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1044.756266][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1044.770150][ T5287] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1044.779338][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.796441][ T5287] usb 5-1: config 0 descriptor?? [ 1045.001148][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.014574][T18636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.027674][T18636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.041103][ T5287] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1045.074884][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.106598][ T1079] bond0 (unregistering): Released all slaves [ 1045.203880][T12907] Bluetooth: hci1: command tx timeout [ 1045.275086][T18666] fuse: Unknown parameter '' [ 1045.297062][ T1079] IPVS: stopping master sync thread 18496 ... [ 1045.644533][T18445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.683492][T18671] usb usb8: usbfs: process 18671 (syz.3.1744) did not claim interface 0 before use [ 1045.705891][T18671] trusted_key: syz.3.1744 sent an empty control message without MSG_MORE. [ 1045.756890][T18678] usblp0:failed reading printer status (-32) [ 1046.088395][ T1079] hsr_slave_0: left promiscuous mode [ 1046.108086][ T1079] hsr_slave_1: left promiscuous mode [ 1046.127664][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.161933][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.194211][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.215148][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.326070][ T1079] veth1_macvtap: left promiscuous mode [ 1046.338830][ T1079] veth0_macvtap: left promiscuous mode [ 1046.356032][ T1079] veth1_vlan: left promiscuous mode [ 1046.380284][ T1079] veth0_vlan: left promiscuous mode [ 1046.554473][T12907] Bluetooth: hci2: command tx timeout [ 1046.827432][ T5289] usb 5-1: USB disconnect, device number 55 [ 1046.872926][ T5289] usblp0: removed [ 1046.976110][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1745'. [ 1047.274193][T12907] Bluetooth: hci1: command tx timeout [ 1048.455770][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 1048.560951][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 1049.354986][T12907] Bluetooth: hci1: command tx timeout [ 1049.682789][T18648] chnl_net:caif_netlink_parms(): no params data found [ 1050.043013][T18580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1050.064836][T18580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1050.124537][T18445] veth0_vlan: entered promiscuous mode [ 1050.178810][T18648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.204496][T18648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.211872][T18648] bridge_slave_0: entered allmulticast mode [ 1050.232182][T18648] bridge_slave_0: entered promiscuous mode [ 1050.269293][T18580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1050.316745][T18580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1050.354948][T18648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.373759][T18648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.384042][T18648] bridge_slave_1: entered allmulticast mode [ 1050.440845][T18648] bridge_slave_1: entered promiscuous mode [ 1050.502291][T18648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.571620][T18648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.622987][T18445] veth1_vlan: entered promiscuous mode [ 1050.668363][T10562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.681920][T10562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.705076][T10562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.719186][T10562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.727579][T10562] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1050.735505][T10562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.749103][T18648] team0: Port device team_slave_0 added [ 1050.778121][T18648] team0: Port device team_slave_1 added [ 1050.899053][T18648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.913809][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.947378][T18648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.010318][T18648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.020561][T18648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.054266][T18648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.138967][ T1079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.321638][ T1079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.381088][T18648] hsr_slave_0: entered promiscuous mode [ 1051.391986][T18648] hsr_slave_1: entered promiscuous mode [ 1051.412142][T18648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.427351][T18648] Cannot create hsr debugfs directory [ 1051.437422][T10562] Bluetooth: hci1: command tx timeout [ 1051.466885][T18445] veth0_macvtap: entered promiscuous mode [ 1051.586823][ T1079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.719078][T18445] veth1_macvtap: entered promiscuous mode [ 1051.795208][ T1079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.923315][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.934185][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.950147][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.960787][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.972686][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.031995][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.044095][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.054188][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.064717][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.074796][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.085291][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.101030][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.160891][T18445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.170427][T18445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.179377][T18445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.188214][T18445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.345176][T18580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.419712][T18767] chnl_net:caif_netlink_parms(): no params data found [ 1052.481709][ T1079] bridge_slave_1: left allmulticast mode [ 1052.488027][ T1079] bridge_slave_1: left promiscuous mode [ 1052.493902][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.502633][ T1079] bridge_slave_0: left allmulticast mode [ 1052.510390][ T1079] bridge_slave_0: left promiscuous mode [ 1052.517307][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.794111][T10562] Bluetooth: hci2: command tx timeout [ 1053.007010][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.018686][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.029838][ T1079] bond0 (unregistering): Released all slaves [ 1053.085504][T18580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.349790][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.357009][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.391354][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.398593][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.457773][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.503491][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.638407][T18767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.645906][T18767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.653116][T18767] bridge_slave_0: entered allmulticast mode [ 1053.662928][T18767] bridge_slave_0: entered promiscuous mode [ 1053.710167][T18767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.721344][T18767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.729430][T18767] bridge_slave_1: entered allmulticast mode [ 1053.736559][T18767] bridge_slave_1: entered promiscuous mode [ 1053.816959][T18767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.852434][T18767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.863266][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.871684][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.896719][ T1079] hsr_slave_0: left promiscuous mode [ 1053.903997][ T1079] hsr_slave_1: left promiscuous mode [ 1053.910307][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.917983][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.926358][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.933878][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.957245][ T1079] veth1_macvtap: left promiscuous mode [ 1053.962794][ T1079] veth0_macvtap: left promiscuous mode [ 1053.968716][ T1079] veth1_vlan: left promiscuous mode [ 1053.974217][ T1079] veth0_vlan: left promiscuous mode [ 1054.619743][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 1054.681029][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 1054.809953][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.816961][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.881366][T10562] Bluetooth: hci2: command tx timeout [ 1055.417573][T18767] team0: Port device team_slave_0 added [ 1055.447028][T18767] team0: Port device team_slave_1 added [ 1055.731981][T18767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.755288][T18767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.798818][T18767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.830309][T18767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.842893][T18767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.923633][T18767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.033937][T18648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1056.125421][T18648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1056.150109][T18648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1056.227454][T18648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1056.281570][T18767] hsr_slave_0: entered promiscuous mode [ 1056.311569][T18767] hsr_slave_1: entered promiscuous mode [ 1056.329872][T18767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.342071][T18767] Cannot create hsr debugfs directory [ 1056.626572][T18580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.796179][T18869] xt_hashlimit: invalid rate [ 1056.867893][T18580] veth0_vlan: entered promiscuous mode [ 1056.954110][T10562] Bluetooth: hci2: command tx timeout [ 1057.163661][T18580] veth1_vlan: entered promiscuous mode [ 1057.216475][T18648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.418552][T18580] veth0_macvtap: entered promiscuous mode [ 1057.462773][T18648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.584838][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.592004][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.648245][T18580] veth1_macvtap: entered promiscuous mode [ 1057.738574][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.745708][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.863968][ T5235] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1057.878594][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.944322][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.984086][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.016946][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.042149][T18580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.081217][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.115316][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.125337][ T5235] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1058.141043][ T5235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.157090][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.174429][ T5235] usb 2-1: Product: syz [ 1058.178625][ T5235] usb 2-1: Manufacturer: syz [ 1058.193814][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.204109][ T5235] usb 2-1: SerialNumber: syz [ 1058.214309][ T5235] usb 2-1: config 0 descriptor?? [ 1058.221352][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.254838][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.285572][T18580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.363314][T18580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.389161][T18580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.399467][T18580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.408697][T18580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.591306][T18767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1058.618307][T18648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.660837][T18767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1058.691990][ T58] usb 2-1: USB disconnect, device number 54 [ 1058.712326][T18767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1058.795081][T18767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1058.934199][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.947883][T18648] veth0_vlan: entered promiscuous mode [ 1058.974072][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.014339][T18648] veth1_vlan: entered promiscuous mode [ 1059.034427][T10562] Bluetooth: hci2: command tx timeout [ 1059.072169][T16760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.081219][T16760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.219326][T18648] veth0_macvtap: entered promiscuous mode [ 1059.251318][T18648] veth1_macvtap: entered promiscuous mode [ 1059.359770][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.377517][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.390429][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.404426][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.430406][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.443987][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.469508][T18648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.504061][ T5235] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1059.575961][T18767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.596754][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.629862][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.647256][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.663190][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.674419][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.698135][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.710788][T18648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.724096][ T5235] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1059.734137][T18648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.744673][ T5235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.759327][T18648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.769948][ T5235] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1059.793330][T18648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.805930][ T5235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.821884][T18648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.830977][ T5235] usb 3-1: Product: syz [ 1059.840184][ T5235] usb 3-1: Manufacturer: syz [ 1059.854018][T18648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.866209][ T5235] usb 3-1: SerialNumber: syz [ 1059.876818][T18648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.889756][ T5235] usb 3-1: config 0 descriptor?? [ 1059.904496][ T5235] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 1059.955443][ T5235] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1059.987974][T18767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.071512][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.078735][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.165666][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.172891][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.190986][ T8] usb 3-1: USB disconnect, device number 47 [ 1060.441798][T18767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1060.584026][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.591977][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.642597][T18767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.733782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1060.745707][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1060.746907][T18901] xt_recent: Unsupported userspace flags (00000064) [ 1060.956602][T18767] veth0_vlan: entered promiscuous mode [ 1061.036138][T18767] veth1_vlan: entered promiscuous mode [ 1061.088276][T18908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1740'. [ 1061.152927][T18767] veth0_macvtap: entered promiscuous mode [ 1061.173688][ T5289] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1061.190110][T18767] veth1_macvtap: entered promiscuous mode [ 1061.321069][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.335502][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.363946][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.378201][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.388884][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.401475][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.405405][ T5289] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1061.423010][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.438501][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.445225][ T5289] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1061.463309][T18767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.470012][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.488043][T18917] fuse: Unknown parameter '0x0000000000000004' [ 1061.501541][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.515564][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.536028][ T5289] usb 3-1: Product: syz [ 1061.537874][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.551238][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.558476][ T5289] usb 3-1: Manufacturer: syz [ 1061.561625][ T58] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1061.574882][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.586034][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.591886][ T5289] usb 3-1: SerialNumber: syz [ 1061.600891][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.613668][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.631934][T18767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.638853][ T5289] usb 3-1: config 0 descriptor?? [ 1061.644690][T18767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.667496][T18767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.697869][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 1061.738666][T18767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.748160][T18767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.758865][T18767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.769719][ T58] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1061.778046][ T58] usb 2-1: config 0 has no interface number 0 [ 1061.784888][ T58] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1061.796926][T18767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.806289][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.846023][ T58] usb 2-1: config 0 descriptor?? [ 1061.883048][ T58] usb 2-1: selecting invalid altsetting 1 [ 1061.906757][ T58] dvb_ttusb_budget: ttusb_init_controller: error [ 1061.916185][ T58] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1061.938260][ T5235] usb 3-1: USB disconnect, device number 48 [ 1062.139880][ T58] DVB: Unable to find symbol cx22700_attach() [ 1062.146325][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.167491][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.240448][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.252120][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.302943][ T58] DVB: Unable to find symbol tda10046_attach() [ 1062.322786][ T58] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1062.358379][ T58] usb 2-1: USB disconnect, device number 55 [ 1062.385913][T18924] ªªªªªª: renamed from vlan0 (while UP) [ 1062.429115][T18925] dccp_invalid_packet: P.Data Offset(0) too small [ 1063.082478][T18950] dccp_invalid_packet: P.Data Offset(0) too small [ 1063.684265][ T5235] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1063.793916][ T58] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1063.933645][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 1063.956573][ T5235] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1063.991805][ T5235] usb 3-1: can't read configurations, error -22 [ 1064.014749][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 1064.039224][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.080700][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.120911][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1064.141541][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.165681][ T58] usb 5-1: config 0 descriptor?? [ 1064.183836][ T5235] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1064.210503][ T58] hub 5-1:0.0: USB hub found [ 1064.403633][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 1064.424451][ T5235] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1064.468176][ T58] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 1064.482562][ T5235] usb 3-1: can't read configurations, error -22 [ 1064.502867][ T5235] usb usb3-port1: attempt power cycle [ 1064.683241][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 1064.733808][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1064.786939][ T58] usb 5-1: USB disconnect, device number 56 [ 1064.937141][ T5235] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1064.975147][T18970] binder: 18968:18970 ioctl 4018620d 0 returned -22 [ 1065.016470][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 1065.042541][ T5235] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1065.094555][ T5235] usb 3-1: can't read configurations, error -22 [ 1065.108479][T18970] netlink: 556 bytes leftover after parsing attributes in process `syz.0.1782'. [ 1065.273734][ T5235] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1065.305120][ T29] audit: type=1326 audit(1725412978.665:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18974 comm="syz.1.1784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x0 [ 1065.335281][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 1065.396482][ T5235] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1065.433627][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1065.444531][ T5235] usb 3-1: can't read configurations, error -22 [ 1065.472097][ T5235] usb usb3-port1: unable to enumerate USB device [ 1065.763835][ T58] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1065.933934][ T5235] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1065.976591][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.004185][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.022506][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.044042][ T58] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1066.054678][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.069227][ T58] usb 5-1: config 0 descriptor?? [ 1066.145062][ T5235] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1066.165433][ T5235] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1066.191842][ T5235] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1066.216138][ T5235] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 1066.228660][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.251437][ T5235] usb 1-1: config 0 descriptor?? [ 1066.506813][ T58] elecom 0003:056E:00FD.0019: unknown main item tag 0x0 [ 1066.530587][ T58] elecom 0003:056E:00FD.0019: unknown main item tag 0x0 [ 1066.549175][T18986] usb usb8: usbfs: process 18986 (syz.1.1789) did not claim interface 0 before use [ 1066.569474][ T58] elecom 0003:056E:00FD.0019: unknown main item tag 0x0 [ 1066.588517][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.603670][ T58] elecom 0003:056E:00FD.0019: unknown main item tag 0x0 [ 1066.617391][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.619041][ T58] elecom 0003:056E:00FD.0019: unknown main item tag 0x0 [ 1066.654630][ T58] elecom 0003:056E:00FD.0019: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 1066.717653][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.735930][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.752380][ T58] usb 5-1: USB disconnect, device number 57 [ 1066.782056][ T5235] usb 1-1: USB disconnect, device number 54 [ 1066.996916][T18994] dccp_invalid_packet: P.Data Offset(0) too small [ 1067.013795][ T5289] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1067.233686][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 1067.240962][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.252700][ T5289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.264355][ T5289] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1067.273439][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.301783][ T5289] usb 3-1: config 0 descriptor?? [ 1067.373179][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 1067.515175][T19004] netlink: 157176 bytes leftover after parsing attributes in process `syz.1.1793'. [ 1067.531418][T19004] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 1067.596812][T19004] usb usb8: usbfs: process 19004 (syz.1.1793) did not claim interface 0 before use [ 1067.775287][ T5289] savu 0003:1E7D:2D5A.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1067.897632][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.076779][ T5235] usb 3-1: USB disconnect, device number 53 [ 1068.174451][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.377373][ T29] audit: type=1326 audit(1725412981.735:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19013 comm="syz.3.1801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838e57cef9 code=0x0 [ 1068.407157][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.618883][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.831211][T19020] batman_adv: batadv0: Adding interface: dummy0 [ 1068.851458][T19020] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.876780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.901227][T19020] batman_adv: batadv0: Interface activated: dummy0 [ 1068.934550][T12907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1068.982712][T12907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1069.000142][T12907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1069.010697][T19023] batadv0: mtu less than device minimum [ 1069.028366][T12907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1069.047718][T12907] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1069.056772][T12907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1069.104856][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.116655][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.129198][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.140729][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.153268][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.164765][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.177356][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.189813][T19023] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1069.237926][T19022] usb usb8: usbfs: process 19022 (syz.2.1804) did not claim interface 0 before use [ 1069.409485][ T12] bridge_slave_1: left allmulticast mode [ 1069.423411][ T12] bridge_slave_1: left promiscuous mode [ 1069.431712][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.449566][ T12] bridge_slave_0: left allmulticast mode [ 1069.478129][ T12] bridge_slave_0: left promiscuous mode [ 1069.501943][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.644037][ T5284] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1069.865855][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1069.881211][ T5284] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1069.926753][ T5284] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1069.933997][ T5284] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 1069.948680][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.985571][ T5284] usb 4-1: config 0 descriptor?? [ 1070.364759][T19029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.405016][T19029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.487138][T19029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.532279][T19029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.584056][ T5284] usb 4-1: USB disconnect, device number 44 [ 1070.618620][T19039] binder: 19038:19039 ioctl 4018620d 0 returned -22 [ 1070.723171][T19039] netlink: 556 bytes leftover after parsing attributes in process `syz.2.1809'. [ 1071.012890][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.032634][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.058705][ T12] bond0 (unregistering): Released all slaves [ 1071.117819][T10562] Bluetooth: hci1: command tx timeout [ 1071.487211][ T29] audit: type=1326 audit(1725412984.855:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19048 comm="syz.1.1814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x0 [ 1071.636494][T19055] netlink: 'syz.2.1815': attribute type 2 has an invalid length. [ 1072.009636][T19027] chnl_net:caif_netlink_parms(): no params data found [ 1072.118184][ T12] hsr_slave_0: left promiscuous mode [ 1072.154996][ T12] hsr_slave_1: left promiscuous mode [ 1072.164160][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.185217][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.215486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.233970][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.307693][ T12] veth1_macvtap: left promiscuous mode [ 1072.313378][ T12] veth0_macvtap: left promiscuous mode [ 1072.329966][ T12] veth1_vlan: left promiscuous mode [ 1072.339248][ T12] veth0_vlan: left promiscuous mode [ 1072.496859][T12907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1072.512331][T12907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1072.522038][T12907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1072.529637][ T5310] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1072.550283][T12907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1072.560153][T12907] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1072.571413][T12907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1072.734303][ T5310] usb 3-1: Using ep0 maxpacket: 8 [ 1072.747046][ T5310] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1072.757040][ T5310] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1072.765741][ T5310] usb 3-1: config 0 has no interface number 0 [ 1072.772205][ T5310] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1072.787171][ T5310] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1072.798808][ T5310] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1072.810867][ T5310] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1072.820538][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1072.830011][ T5310] usb 3-1: Product: syz [ 1072.843197][ T5310] usb 3-1: config 0 descriptor?? [ 1073.202683][T10562] Bluetooth: hci1: command tx timeout [ 1073.392361][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1073.466429][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1073.502795][ T5310] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input56 [ 1073.544808][ T5310] input: failed to attach handler kbd to device input56, error: -5 [ 1074.641011][T10562] Bluetooth: hci2: command tx timeout [ 1074.685330][T19089] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1074.938111][T19096] net_ratelimit: 12 callbacks suppressed [ 1074.938128][T19096] dccp_invalid_packet: P.Data Offset(0) too small [ 1075.062215][T19027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.081882][T19027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.092797][T19027] bridge_slave_0: entered allmulticast mode [ 1075.107782][T19027] bridge_slave_0: entered promiscuous mode [ 1075.160846][T19027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.203986][T19027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.214714][T19027] bridge_slave_1: entered allmulticast mode [ 1075.257260][T19027] bridge_slave_1: entered promiscuous mode [ 1075.279014][T10562] Bluetooth: hci1: command tx timeout [ 1075.486414][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 1075.531054][T19027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.665124][T19027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.791269][ T5286] usb 3-1: USB disconnect, device number 54 [ 1076.078628][T19127] hub 9-0:1.0: USB hub found [ 1076.114327][T19127] hub 9-0:1.0: 8 ports detected [ 1076.141688][T19027] team0: Port device team_slave_0 added [ 1076.218925][T19027] team0: Port device team_slave_1 added [ 1076.252548][T19081] chnl_net:caif_netlink_parms(): no params data found [ 1076.326994][T19135] dccp_invalid_packet: P.Data Offset(103) too large [ 1076.340987][T19027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.352463][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.382579][T19027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.393080][ T29] audit: type=1326 audit(1725412989.755:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19129 comm="syz.2.1828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x0 [ 1076.496736][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.534167][T19124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1826'. [ 1076.570214][T19124] vlan0: entered promiscuous mode [ 1076.607163][T19124] bond0: entered promiscuous mode [ 1076.630292][T19124] bond_slave_0: entered promiscuous mode [ 1076.681238][T19124] bond_slave_1: entered promiscuous mode [ 1076.713782][T10562] Bluetooth: hci2: command tx timeout [ 1076.794110][T19027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.801141][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.915189][T19027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.089988][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.285948][T19164] fuse: Unknown parameter '0x0000000000000004' [ 1077.342269][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.363908][T10562] Bluetooth: hci1: command tx timeout [ 1077.422563][ T5310] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1077.448646][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 1077.490021][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1835'. [ 1077.506026][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 1077.564408][T19027] hsr_slave_0: entered promiscuous mode [ 1077.571425][T19027] hsr_slave_1: entered promiscuous mode [ 1077.608410][T19027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.616321][T19027] Cannot create hsr debugfs directory [ 1077.629987][ T5310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1077.652081][ T5310] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1077.679650][ T5310] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1077.700239][ T5310] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 1077.710005][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.720557][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.736006][ T5310] usb 5-1: config 0 descriptor?? [ 1077.830428][T19081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.842393][T19081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.853474][T19081] bridge_slave_0: entered allmulticast mode [ 1077.861356][T19081] bridge_slave_0: entered promiscuous mode [ 1077.907385][T19081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.914061][ T5284] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1077.927076][T19081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.939707][T19081] bridge_slave_1: entered allmulticast mode [ 1077.961690][T19081] bridge_slave_1: entered promiscuous mode [ 1078.031932][T19081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.059689][T19081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.098561][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.125337][ T5284] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1078.125878][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.154430][ T5284] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1078.154537][ T5310] usb 5-1: USB disconnect, device number 58 [ 1078.179421][ T5284] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1078.218017][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.218714][T19081] team0: Port device team_slave_0 added [ 1078.249821][ T5284] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1078.338290][T19081] team0: Port device team_slave_1 added [ 1078.464433][ T5284] gspca_sn9c2028: read1 error -32 [ 1078.598198][ T12] bridge_slave_1: left allmulticast mode [ 1078.610457][ T12] bridge_slave_1: left promiscuous mode [ 1078.630046][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.649435][ T12] bridge_slave_0: left allmulticast mode [ 1078.661067][ T12] bridge_slave_0: left promiscuous mode [ 1078.674016][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.793797][T10562] Bluetooth: hci2: command tx timeout [ 1078.949437][ T5284] usb 2-1: USB disconnect, device number 56 [ 1079.930259][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.962329][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.973447][ T12] bond0 (unregistering): Released all slaves [ 1079.997586][T19081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.035184][T19081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.097938][T19081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.365069][T19193] dccp_invalid_packet: P.Data Offset(103) too large [ 1080.394326][T19081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.411656][T19081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.447984][T19081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.652143][ T5286] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1080.877884][ T5286] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1080.887623][T10562] Bluetooth: hci2: command tx timeout [ 1080.902878][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.912232][ T5286] usb 3-1: Product: syz [ 1080.924401][ T5286] usb 3-1: Manufacturer: syz [ 1080.929128][ T5286] usb 3-1: SerialNumber: syz [ 1080.955308][ T5286] usb 3-1: config 0 descriptor?? [ 1081.108772][T19081] hsr_slave_0: entered promiscuous mode [ 1081.141956][T19081] hsr_slave_1: entered promiscuous mode [ 1081.161855][T19081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.202365][T19081] Cannot create hsr debugfs directory [ 1081.284955][T12907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1081.297843][T12907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1081.306116][ T5287] usb 3-1: USB disconnect, device number 55 [ 1081.312474][T12907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1081.328930][T12907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1081.352813][T12907] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1081.363698][T12907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1081.375010][ T5286] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1081.389518][ T12] hsr_slave_0: left promiscuous mode [ 1081.431042][ T12] hsr_slave_1: left promiscuous mode [ 1081.440388][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.452823][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.463156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.483839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.549998][ T12] veth1_macvtap: left promiscuous mode [ 1081.561151][ T12] veth0_macvtap: left promiscuous mode [ 1081.568088][ T12] veth1_vlan: left promiscuous mode [ 1081.573376][ T12] veth0_vlan: left promiscuous mode [ 1081.603700][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 1081.622982][ T5286] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1081.636384][ T5286] usb 2-1: can't read configurations, error -22 [ 1081.793862][ T5286] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1082.074104][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 1082.103162][ T5286] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1082.143983][ T5286] usb 2-1: can't read configurations, error -22 [ 1082.150824][ T5286] usb usb2-port1: attempt power cycle [ 1082.593923][ T5286] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1082.635619][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 1082.653256][ T5286] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1082.662919][ T5286] usb 2-1: can't read configurations, error -22 [ 1082.848937][ T5286] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1082.909342][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 1082.925748][ T5286] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1082.952235][ T5286] usb 2-1: can't read configurations, error -22 [ 1082.960096][ T5286] usb usb2-port1: unable to enumerate USB device [ 1083.048130][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1083.182984][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1083.435447][T10562] Bluetooth: hci4: command tx timeout [ 1084.823679][ T5287] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1085.005566][ T5287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.043802][ T5287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1085.052769][ T5287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1085.092099][ T5287] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1085.138166][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.165816][T19218] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1085.201373][T19027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1085.210020][ T5287] hub 3-1:1.0: bad descriptor, ignoring hub [ 1085.223838][ T5287] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1085.225661][T19027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1085.241715][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 1085.255244][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 1085.272491][T19203] chnl_net:caif_netlink_parms(): no params data found [ 1085.281640][ T5287] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1085.288343][ T5287] cdc_wdm 3-1:1.0: Unknown control protocol [ 1085.338802][T19027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1085.350940][T19027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1085.515880][T10562] Bluetooth: hci4: command tx timeout [ 1085.563130][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.569992][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.576372][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.582977][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.589231][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.595855][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.602215][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.608828][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.615266][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.622167][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.628465][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.635091][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.641439][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.648069][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.654377][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.661008][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.667328][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.673991][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.680415][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1085.687077][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1085.733841][T19225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.743462][T19225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.750600][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.862769][T19228] macsec1: entered promiscuous mode [ 1085.868407][T19228] vlan0: entered promiscuous mode [ 1085.877762][T19228] macsec1: entered allmulticast mode [ 1085.883337][T19228] vlan0: entered allmulticast mode [ 1085.888947][T19228] veth0_vlan: entered allmulticast mode [ 1086.043011][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.067939][ T29] audit: type=1326 audit(1725412999.435:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.152976][ T29] audit: type=1326 audit(1725412999.465:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.261870][ T29] audit: type=1326 audit(1725412999.465:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.261924][ T29] audit: type=1326 audit(1725412999.465:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.261962][ T29] audit: type=1326 audit(1725412999.465:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.262001][ T29] audit: type=1326 audit(1725412999.465:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.262039][ T29] audit: type=1326 audit(1725412999.465:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.262078][ T29] audit: type=1326 audit(1725412999.465:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19231 comm="syz.1.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1086.263087][T19203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.263508][T19203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.268743][T19203] bridge_slave_0: entered allmulticast mode [ 1086.270210][T19203] bridge_slave_0: entered promiscuous mode [ 1086.457327][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.571789][T19203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.571951][T19203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.572328][T19203] bridge_slave_1: entered allmulticast mode [ 1086.575973][T19203] bridge_slave_1: entered promiscuous mode [ 1086.592575][T19238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.665235][T19234] netlink: 'syz.2.1851': attribute type 30 has an invalid length. [ 1086.731776][T19235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.799694][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.870213][T19203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.887929][T19203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.091933][T19203] team0: Port device team_slave_0 added [ 1087.188375][T19203] team0: Port device team_slave_1 added [ 1087.309481][T19203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.309495][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.309510][T19203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.571173][T19203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.571196][T19203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.571286][T19203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.593911][T10562] Bluetooth: hci4: command tx timeout [ 1087.732486][T19081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1087.744251][ T12] bridge_slave_1: left allmulticast mode [ 1087.744290][ T12] bridge_slave_1: left promiscuous mode [ 1087.744538][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.759190][ T12] bridge_slave_0: left allmulticast mode [ 1087.759235][ T12] bridge_slave_0: left promiscuous mode [ 1087.759572][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.710981][ T12] bond0 (unregistering): left promiscuous mode [ 1088.717609][ T12] bond_slave_0: left promiscuous mode [ 1088.723209][ T12] bond_slave_1: left promiscuous mode [ 1088.752322][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.768621][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.781174][ T12] bond0 (unregistering): Released all slaves [ 1088.828849][T19081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1088.874667][T19081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1088.949306][T19255] netlink: 'syz.1.1859': attribute type 4 has an invalid length. [ 1088.998241][ T5310] usb 3-1: USB disconnect, device number 56 [ 1089.003410][T19203] hsr_slave_0: entered promiscuous mode [ 1089.024017][T19203] hsr_slave_1: entered promiscuous mode [ 1089.058068][T19203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.080950][T19203] Cannot create hsr debugfs directory [ 1089.153945][T19081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1089.418184][T19027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.544193][T19274] syzkaller1: entered promiscuous mode [ 1089.549908][T19274] syzkaller1: entered allmulticast mode [ 1089.681982][T10562] Bluetooth: hci4: command tx timeout [ 1089.768812][ T12] hsr_slave_0: left promiscuous mode [ 1089.788508][ T12] hsr_slave_1: left promiscuous mode [ 1089.805937][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.813511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.824592][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.832147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.856701][ T12] veth1_macvtap: left promiscuous mode [ 1089.862248][ T12] veth0_macvtap: left promiscuous mode [ 1089.868512][ T12] veth1_vlan: left promiscuous mode [ 1089.879767][ T12] veth0_vlan: left promiscuous mode [ 1089.934044][ T58] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1090.133759][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 1090.140140][ T58] usb 2-1: too many configurations: 20, using maximum allowed: 8 [ 1090.166021][ T58] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1090.181860][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=176 [ 1090.212594][ T58] usb 2-1: Product: syz [ 1090.216988][ T58] usb 2-1: Manufacturer: syz [ 1090.221617][ T58] usb 2-1: SerialNumber: syz [ 1090.252608][ T58] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1090.259207][ T58] r8152-cfgselector 2-1: config 0 descriptor?? [ 1090.544611][ T58] cdc_acm 2-1:0.0: Zero length descriptor references [ 1090.551410][ T58] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1090.573027][ T58] r8152-cfgselector 2-1: USB disconnect, device number 61 [ 1090.776503][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1090.850098][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1091.992008][T19027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.020376][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 1092.033951][T19295] mac80211_hwsim hwsim297 wlan1: entered promiscuous mode [ 1092.054805][T19295] macvlan2: entered promiscuous mode [ 1092.072649][T19295] mac80211_hwsim hwsim297 wlan1: left promiscuous mode [ 1092.179040][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.186293][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.238628][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.245892][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.249608][T19299] dccp_invalid_packet: P.Data Offset(0) too small [ 1092.365813][T19081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.516893][T19081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.578352][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.585698][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.600505][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.607808][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.812958][T19203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1092.854921][T19203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1092.877647][T19203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1092.889780][T19203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1092.951599][T19027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.050101][T19081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.312504][T19027] veth0_vlan: entered promiscuous mode [ 1093.393227][T19027] veth1_vlan: entered promiscuous mode [ 1093.433692][T19081] veth0_vlan: entered promiscuous mode [ 1093.483844][T19081] veth1_vlan: entered promiscuous mode [ 1093.530241][T19340] batman_adv: batadv0: Adding interface: dummy0 [ 1093.545005][T19340] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.577628][T19340] batman_adv: batadv0: Interface activated: dummy0 [ 1093.649396][T19342] batadv0: mtu less than device minimum [ 1093.666444][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.678979][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.691540][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.703997][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.716515][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.728356][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.740008][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.751679][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.794984][T19027] veth0_macvtap: entered promiscuous mode [ 1093.858123][T19027] veth1_macvtap: entered promiscuous mode [ 1093.894347][ T5284] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1093.900333][T19081] veth0_macvtap: entered promiscuous mode [ 1093.953323][T19081] veth1_macvtap: entered promiscuous mode [ 1094.020946][T19203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.051399][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.067777][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.079064][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.091916][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.109256][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.125180][T19027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.138244][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.163365][ T5284] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1094.180025][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.194846][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.198396][ T5284] usb 2-1: config 0 descriptor?? [ 1094.231189][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.258063][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.279862][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.297306][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.317269][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.343327][T19081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.358354][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.372281][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.382487][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.408540][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.429044][T19081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.439952][T19081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.457702][T19081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.466507][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.491293][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.502085][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.533801][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.554759][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.565858][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.578949][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.589825][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.601935][T19027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.637443][T19203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.660895][ T5284] hid-steam 0003:28DE:1142.001B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 1094.702911][T19081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.723647][T19081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.743436][T19081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.764034][ T5284] hid-steam 0003:28DE:1142.001B: Steam wireless receiver connected [ 1094.773751][T19081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.807591][T19027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.833644][ T5284] hid-steam 0003:28DE:1142.001C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 1094.847111][T19027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.856043][T19027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.890354][T19027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.902892][ T5284] usb 2-1: USB disconnect, device number 62 [ 1094.952817][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.960030][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.963027][ T5284] hid-steam 0003:28DE:1142.001B: Steam wireless receiver disconnected [ 1095.013071][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.020288][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.284477][T16760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.303693][T16760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.321532][T19203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.427972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.459716][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.569183][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.588660][T19203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.590823][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.756164][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.785547][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.816638][T19203] veth0_vlan: entered promiscuous mode [ 1095.845434][T19203] veth1_vlan: entered promiscuous mode [ 1095.856340][ T5288] IPVS: starting estimator thread 0... [ 1095.930507][T19403] tipc: Started in network mode [ 1095.954289][T19403] tipc: Node identity ac1414aa, cluster identity 4711 [ 1095.974637][T19404] IPVS: using max 33 ests per chain, 79200 per kthread [ 1095.982905][T19403] tipc: Enabled bearer , priority 10 [ 1096.061588][T19203] veth0_macvtap: entered promiscuous mode [ 1096.098134][T19203] veth1_macvtap: entered promiscuous mode [ 1096.126913][T19413] xt_hashlimit: overflow, try lower: 3/0 [ 1096.200765][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.235622][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.271505][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.304010][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.339414][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.378875][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.426418][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1096.493926][ T5235] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1096.542894][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1096.579575][T19203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.682303][T19429] batman_adv: batadv0: Interface deactivated: dummy0 [ 1096.726064][T19429] batman_adv: batadv0: Removing interface: dummy0 [ 1096.737616][ T5235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.762778][T19429] bridge_slave_0: left allmulticast mode [ 1096.769324][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1096.800096][T19429] bridge_slave_0: left promiscuous mode [ 1096.810359][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1096.837837][T19429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.843733][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1096.896601][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1096.902007][ T29] audit: type=1326 audit(1725413010.255:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.0.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ab937cef9 code=0x0 [ 1096.933063][ T5235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1096.967391][T19429] bridge_slave_1: left allmulticast mode [ 1096.974668][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1096.986195][T19429] bridge_slave_1: left promiscuous mode [ 1096.992084][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1096.993719][ T5286] tipc: Node number set to 2886997162 [ 1097.013301][T19429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.027572][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1097.057797][T19429] bond0: (slave bond_slave_0): Releasing backup interface [ 1097.073847][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1097.117146][ T5235] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1097.125907][T19429] bond0: (slave bond_slave_1): Releasing backup interface [ 1097.139750][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1097.169957][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1097.215979][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1097.275110][ T5235] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1097.310309][T19429] team0: Port device team_slave_0 removed [ 1097.325819][ T5235] usb 4-1: string descriptor 0 read error: -22 [ 1097.348678][ T5235] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1097.372254][T19429] team0: Port device team_slave_1 removed [ 1097.385695][T19429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1097.392668][ T5235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.403760][ C0] net_ratelimit: 19 callbacks suppressed [ 1097.403784][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1097.425013][T19429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.434655][ T5235] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1097.449480][T19429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.485458][T19429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.607545][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.640642][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.660100][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.688343][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.707360][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.726334][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.783827][T19203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.800454][T19203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.802091][ T58] usb 4-1: USB disconnect, device number 45 [ 1097.840339][T19203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.899853][T19435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.912983][T19435] team0: Port device bond0 added [ 1097.933772][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1098.024173][T19203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.063140][T19203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.104847][T19203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.109662][ T5310] hid-generic 0009:0000:0000.001D: unknown main item tag 0x0 [ 1098.123010][ T5310] hid-generic 0009:0000:0000.001D: unknown main item tag 0x0 [ 1098.137450][ T5310] hid-generic 0009:0000:0000.001D: unknown main item tag 0x0 [ 1098.150875][T19203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.176253][ T5310] hid-generic 0009:0000:0000.001D: unknown main item tag 0x0 [ 1098.236537][ T5310] hid-generic 0009:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1098.434240][ T5289] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1098.472679][T16760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.489643][T16760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.544669][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.572901][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.598391][ T29] audit: type=1326 audit(1725413011.965:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1098.661916][ T29] audit: type=1326 audit(1725413011.995:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1098.716861][ T5235] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1098.717695][ T5289] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1098.760686][ T29] audit: type=1326 audit(1725413011.995:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1098.790396][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.828864][ T5289] usb 2-1: Product: syz [ 1098.836258][ T5289] usb 2-1: Manufacturer: syz [ 1098.843523][ T5289] usb 2-1: SerialNumber: syz [ 1098.854736][ T29] audit: type=1326 audit(1725413011.995:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1098.908317][ T5289] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1098.936271][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.954044][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1098.985659][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.001561][ T29] audit: type=1326 audit(1725413011.995:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1099.043720][ T5235] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1099.092195][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.114970][ T5310] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1099.129666][ T29] audit: type=1326 audit(1725413011.995:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1099.186832][ T5235] usb 1-1: config 0 descriptor?? [ 1099.244364][ T29] audit: type=1326 audit(1725413011.995:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1099.265239][T19486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.368433][ T29] audit: type=1326 audit(1725413012.005:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1099.439903][ T29] audit: type=1326 audit(1725413012.005:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19468 comm="syz.2.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd17cef9 code=0x7ffc0000 [ 1099.489537][T19475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.501711][ T5289] usb 2-1: USB disconnect, device number 63 [ 1099.566035][T19471] netlink: 'syz.0.1901': attribute type 4 has an invalid length. [ 1099.592627][ T5235] usbhid 1-1:0.0: can't add hid device: -71 [ 1099.641468][ T5235] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1099.680177][ T5235] usb 1-1: USB disconnect, device number 55 [ 1099.993834][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1100.064990][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 1100.121085][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 1100.234266][ T5310] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1100.260047][ T5310] ath9k_htc: Failed to initialize the device [ 1100.309749][ T5289] usb 2-1: ath9k_htc: USB layer deinitialized [ 1100.438498][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 1101.033711][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1101.710093][T19559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.843861][T19559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.866470][ T945] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1102.083734][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1102.094484][ T945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.106574][ T945] usb 5-1: config 0 has no interfaces? [ 1102.112895][ T945] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1102.123337][ T945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.183027][ T945] usb 5-1: config 0 descriptor?? [ 1102.296220][T19593] bond0: entered promiscuous mode [ 1102.308480][T19593] bond_slave_0: entered promiscuous mode [ 1102.330923][T19593] bond_slave_1: entered promiscuous mode [ 1102.351459][T19593] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1102.368929][T19593] bond0: left promiscuous mode [ 1102.375092][T19593] bond_slave_0: left promiscuous mode [ 1102.383975][T19593] bond_slave_1: left promiscuous mode [ 1102.437369][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 1102.618033][ T58] usb 5-1: USB disconnect, device number 59 [ 1102.723244][T19607] sch_tbf: burst 88 is lower than device veth0_to_bond mtu (1514) ! [ 1103.117193][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1103.179212][ T1079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.426200][ T1079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.660404][ T1079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.692180][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 1103.692194][ T29] audit: type=1326 audit(1725413017.055:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19621 comm="syz.3.1952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67dc97cef9 code=0x0 [ 1103.731658][T19620] dummy0: entered promiscuous mode [ 1103.742847][T19620] macvtap1: entered promiscuous mode [ 1103.764559][T19620] dummy0: left promiscuous mode [ 1103.898913][ T5289] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1103.925450][ T1079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.949587][T12907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1103.969035][T12907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1103.979474][T12907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1103.992733][T12907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1104.002158][T12907] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1104.014363][T12907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1104.107418][ T5289] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1104.128311][ T5289] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1104.145773][ T5289] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1104.159287][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1104.173269][ T5289] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.240050][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.277670][ T5289] usb 5-1: Product: syz [ 1104.281908][ T5289] usb 5-1: Manufacturer: syz [ 1104.289476][ T1079] bridge_slave_1: left allmulticast mode [ 1104.296088][ T1079] bridge_slave_1: left promiscuous mode [ 1104.300309][ T5289] usb 5-1: SerialNumber: syz [ 1104.302655][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.321192][ T1079] bridge_slave_0: left allmulticast mode [ 1104.336798][ T1079] bridge_slave_0: left promiscuous mode [ 1104.343387][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.712013][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 1104.761166][ T5289] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1104.769090][ T5289] cdc_ncm 5-1:1.0: bind() failure [ 1104.799323][ T5289] usb 5-1: USB disconnect, device number 60 [ 1104.882664][T10562] Bluetooth: hci1: Invalid handle: 0x766b > 0x0eff [ 1105.150379][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.161754][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.173295][ T1079] bond0 (unregistering): Released all slaves [ 1105.184052][ T5310] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1105.193848][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1105.431093][ T5310] usb 1-1: Using ep0 maxpacket: 32 [ 1105.439433][ T1079] tipc: Disabling bearer [ 1105.448067][ T5310] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1105.457934][ T1079] tipc: Left network mode [ 1105.467640][ T5310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.506953][ T5310] usb 1-1: config 0 descriptor?? [ 1105.523360][ T5310] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1105.589678][ T1079] IPVS: stopping backup sync thread 19089 ... [ 1105.605539][T19655] batman_adv: batadv0: Adding interface: dummy0 [ 1105.611994][T19655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.654779][T19655] batman_adv: batadv0: Interface activated: dummy0 [ 1105.681811][T19634] chnl_net:caif_netlink_parms(): no params data found [ 1105.848274][T19655] batadv0: mtu less than device minimum [ 1105.870814][T19655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1105.883261][T19655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1105.895609][T19655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1105.908074][T19655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1105.920111][T19655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1105.932438][T19655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1106.073978][T10562] Bluetooth: hci5: command tx timeout [ 1106.346417][ T1079] hsr_slave_0: left promiscuous mode [ 1106.361248][ T1079] hsr_slave_1: left promiscuous mode [ 1106.374076][ T1079] batman_adv: batadv0: Interface deactivated: dummy0 [ 1106.382027][ T1079] batman_adv: batadv0: Removing interface: dummy0 [ 1106.401626][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.410344][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.423015][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.433097][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.457663][ T1079] veth1_macvtap: left promiscuous mode [ 1106.463397][ T1079] veth0_macvtap: left promiscuous mode [ 1106.470133][ T1079] veth1_vlan: left promiscuous mode [ 1106.478662][ T1079] veth0_vlan: left promiscuous mode [ 1106.667904][ T29] audit: type=1326 audit(1725413020.025:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1106.734497][ T29] audit: type=1326 audit(1725413020.025:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1106.790226][ T29] audit: type=1326 audit(1725413020.035:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1106.827116][ T29] audit: type=1326 audit(1725413020.035:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1106.872055][ T29] audit: type=1326 audit(1725413020.065:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1106.937292][ T29] audit: type=1326 audit(1725413020.065:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1106.978848][ T29] audit: type=1326 audit(1725413020.065:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1107.005265][ T5310] gspca_vc032x: reg_w err -71 [ 1107.011812][ T29] audit: type=1326 audit(1725413020.065:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1107.015807][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.064637][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.072053][ T29] audit: type=1326 audit(1725413020.075:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19692 comm="syz.1.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fbe65d7cef9 code=0x7ffc0000 [ 1107.087492][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.120810][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.137623][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.146626][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.161848][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.168170][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.177723][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.189993][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.195918][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.217899][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.290804][T19702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.319709][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.330747][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.336173][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.359170][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.364635][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.369960][ T5310] gspca_vc032x: I2c Bus Busy Wait 00 [ 1107.376110][ T5310] gspca_vc032x: Unknown sensor... [ 1107.383989][ T5310] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1107.399404][ T5310] usb 1-1: USB disconnect, device number 56 [ 1107.448352][T19705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.033006][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 1108.107202][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 1108.158619][T10562] Bluetooth: hci5: command tx timeout [ 1108.958486][T19716] net_ratelimit: 14 callbacks suppressed [ 1108.958506][T19716] dccp_invalid_packet: P.Data Offset(0) too small [ 1109.030204][T19634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.047798][T19634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.074400][T19634] bridge_slave_0: entered allmulticast mode [ 1109.092220][T19634] bridge_slave_0: entered promiscuous mode [ 1109.219879][T19634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.234253][T19634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.254570][T19634] bridge_slave_1: entered allmulticast mode [ 1109.268241][T19634] bridge_slave_1: entered promiscuous mode [ 1109.402022][T19634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.451153][T19634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.624329][T19743] dccp_invalid_packet: P.Data Offset(0) too small [ 1109.629970][T19634] team0: Port device team_slave_0 added [ 1109.656575][T19634] team0: Port device team_slave_1 added [ 1109.775194][T19634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.791861][T19634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.795554][ T1079] IPVS: stop unused estimator thread 0... [ 1109.849930][T19634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.995001][T19634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.027202][T19634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.063743][T19634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.149614][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1110.149636][ T29] audit: type=1326 audit(1725413023.505:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.178141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.234900][T10562] Bluetooth: hci5: command tx timeout [ 1110.236143][T19634] hsr_slave_0: entered promiscuous mode [ 1110.269712][ T29] audit: type=1326 audit(1725413023.505:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.294977][T19634] hsr_slave_1: entered promiscuous mode [ 1110.307943][ T29] audit: type=1326 audit(1725413023.505:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.373631][ T29] audit: type=1326 audit(1725413023.505:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.406501][T19634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.460344][T19634] Cannot create hsr debugfs directory [ 1110.520306][ T29] audit: type=1326 audit(1725413023.505:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.552302][ T29] audit: type=1326 audit(1725413023.505:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.585419][ T29] audit: type=1326 audit(1725413023.555:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.617211][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.630673][ T29] audit: type=1326 audit(1725413023.565:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.677106][ T29] audit: type=1326 audit(1725413023.575:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1110.846646][T19775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1110.902195][ T29] audit: type=1326 audit(1725413024.265:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19759 comm="syz.4.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ab977cef9 code=0x7ffc0000 [ 1112.045728][ T5284] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1112.245247][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 1112.258529][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.296077][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.313980][T10562] Bluetooth: hci5: command tx timeout [ 1112.333821][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1112.354603][T19634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1112.369612][ T5284] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1112.389473][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.403423][ T5284] usb 5-1: config 0 descriptor?? [ 1112.439658][T19634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1112.479733][T19634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1112.522625][T19634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1112.799233][T19634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.862105][T19634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.903797][T19821] dccp_invalid_packet: P.Data Offset(0) too small [ 1112.907064][ T5284] HID 045e:07da: Invalid code 65791 type 1 [ 1112.930903][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.938123][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.966061][ T5284] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001E/input/input57 [ 1113.015229][ T5284] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1113.088512][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.095743][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.131216][ T5284] usb 5-1: USB disconnect, device number 61 [ 1113.488621][T19634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.708759][T19634] veth0_vlan: entered promiscuous mode [ 1113.774765][T19634] veth1_vlan: entered promiscuous mode [ 1113.879962][T19634] veth0_macvtap: entered promiscuous mode [ 1113.953138][T19634] veth1_macvtap: entered promiscuous mode [ 1114.040291][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.067004][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.093846][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.125819][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.164846][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.203787][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.268962][T19634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.336332][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.383655][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.443659][ T5287] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1114.476531][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.502655][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.515481][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.532666][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.547670][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.613424][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.654045][T19634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.663741][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 1114.701255][ T5287] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1114.726103][ T5287] usb 1-1: can't read configurations, error -22 [ 1114.801777][T19634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.810907][ T58] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1114.851381][T19634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.913656][ T5287] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1115.001813][T19634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.015848][T19634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.049753][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1115.093013][ T58] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1115.128749][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1115.169902][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 1115.183248][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1115.225185][ T5287] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1115.245981][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1115.265678][ T5287] usb 1-1: can't read configurations, error -22 [ 1115.276007][ T5287] usb usb1-port1: attempt power cycle [ 1115.306629][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1115.328376][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.333828][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1115.351571][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.374685][ T58] usb 5-1: Product: syz [ 1115.393713][ T58] usb 5-1: Manufacturer: syz [ 1115.418340][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 1115.444485][T16760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.458535][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 1115.476240][T16760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.498218][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1115.518664][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 1115.638021][ T58] usb 5-1: USB disconnect, device number 62 [ 1115.724360][ T5287] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1115.796828][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 1115.808831][ T5287] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1115.827963][ T5287] usb 1-1: can't read configurations, error -22 [ 1115.890531][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1115.890551][ T29] audit: type=1326 audit(1725413029.255:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19884 comm="syz.2.1948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4929b7cef9 code=0x0 [ 1115.993979][ T5287] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1116.054484][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 1116.066364][ T5287] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 22 [ 1116.102588][ T5287] usb 1-1: can't read configurations, error -22 [ 1116.141668][ T5287] usb usb1-port1: unable to enumerate USB device [ 1116.234482][ T58] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1116.238286][ T30] INFO: task syz.2.1601:17557 blocked for more than 143 seconds. [ 1116.250914][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.257986][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.279954][ T30] Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1116.317400][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.366005][ T30] task:syz.2.1601 state:D stack:24440 pid:17557 tgid:17557 ppid:16537 flags:0x00004004 [ 1116.407266][ T30] Call Trace: [ 1116.425723][ T30] [ 1116.434168][ T30] __schedule+0x1800/0x4a60 [ 1116.439869][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1116.458504][ T30] ? __pfx___schedule+0x10/0x10 [ 1116.468604][ T58] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1116.490310][ T30] ? __pfx_lock_release+0x10/0x10 [ 1116.506211][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1116.512506][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1116.525307][ T30] ? schedule+0x90/0x320 [ 1116.535311][ T30] schedule+0x14b/0x320 [ 1116.539600][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1116.550824][ T30] schedule_preempt_disabled+0x13/0x30 [ 1116.562810][ T30] __mutex_lock+0x6a4/0xd70 [ 1116.571221][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1116.582586][ T30] ? __mutex_lock+0x527/0xd70 [ 1116.591073][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 1116.598102][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1116.612760][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1116.630319][ T30] ? __pfx_up_write+0x10/0x10 [ 1116.643762][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1116.665916][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1116.690415][ T58] usb 5-1: Product: syz [ 1116.695224][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 1116.711701][ T58] usb 5-1: Manufacturer: syz [ 1116.727247][ T30] hugetlb_wp+0x104d/0x3a90 [ 1116.743826][ T30] ? mark_lock+0x9a/0x350 [ 1116.748205][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1116.759707][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 1116.776133][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 1116.791307][ T30] ? __pfx___might_resched+0x10/0x10 [ 1116.813516][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1116.822012][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 1116.838451][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1116.852143][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1116.860198][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1116.892468][ T30] ? __filemap_get_folio+0x769/0xc10 [ 1116.905848][ T30] hugetlb_fault+0x27b2/0x3770 [ 1116.913269][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1116.921581][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1116.929692][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1116.938161][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1116.949054][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 1116.976188][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.007403][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 1117.012697][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1117.039476][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 1117.064621][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 1117.069908][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1117.099913][ T30] ? exc_page_fault+0x113/0x8c0 [ 1117.105351][ T30] exc_page_fault+0x459/0x8c0 [ 1117.110183][ T30] asm_exc_page_fault+0x26/0x30 [ 1117.138509][ T30] RIP: 0033:0x7f1a8254497c [ 1117.143004][ T30] RSP: 002b:00007f1a8285fb88 EFLAGS: 00010246 [ 1117.154997][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 1117.163036][ T30] RDX: 0000000000000010 RSI: 00007f1a820005d5 RDI: 0000000020000d00 [ 1117.182788][ T30] RBP: 00007f1a82737a80 R08: 00007f1a82400000 R09: 0000000000000001 [ 1117.210753][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000eb6db [ 1117.221571][ T30] R13: 00007f1a8285fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 1117.249696][ T30] [ 1117.259445][ T30] INFO: task syz.2.1601:17558 blocked for more than 144 seconds. [ 1117.288343][ T30] Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1117.302346][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.311484][ T30] task:syz.2.1601 state:D stack:26480 pid:17558 tgid:17557 ppid:16537 flags:0x00004006 [ 1117.322239][ T30] Call Trace: [ 1117.333837][ T30] [ 1117.337895][ T30] __schedule+0x1800/0x4a60 [ 1117.342486][ T30] ? __pfx___schedule+0x10/0x10 [ 1117.355840][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.360939][ T30] ? preempt_schedule_common+0x84/0xd0 [ 1117.373265][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 1117.380128][ T30] ? schedule+0x90/0x320 [ 1117.385026][ T30] schedule+0x14b/0x320 [ 1117.389327][ T30] io_schedule+0x8d/0x110 [ 1117.401565][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1117.407820][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1117.421019][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1117.427017][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1117.432744][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 1117.446048][ T30] __filemap_get_folio+0xb7/0xc10 [ 1117.451152][ T30] hugetlb_fault+0x1b72/0x3770 [ 1117.461011][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1117.467133][ T30] ? mt_find+0x226/0x850 [ 1117.471438][ T30] ? __pfx_lock_release+0x10/0x10 [ 1117.483507][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1117.489774][ T30] ? mt_find+0x62d/0x850 [ 1117.494600][ T30] ? mt_find+0x226/0x850 [ 1117.498902][ T30] ? __pfx_mt_find+0x10/0x10 [ 1117.511231][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1117.522365][ T30] ? find_vma+0xf9/0x170 [ 1117.533776][ T30] ? __pfx_find_vma+0x10/0x10 [ 1117.544756][ C1] wdm_int_callback: 15752 callbacks suppressed [ 1117.544781][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.557657][ C1] wdm_int_callback: 15752 callbacks suppressed [ 1117.557678][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.572467][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.579117][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.585480][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.592119][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.598623][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.605257][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.611571][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.618191][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.624563][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.631194][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.637674][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.644287][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.650879][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.657483][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.663742][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.670348][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.676613][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1117.683227][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1117.697322][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1117.706177][ T58] usb 5-1: USB disconnect, device number 63 [ 1117.709166][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1117.733102][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1117.739328][ T30] exc_page_fault+0x2b9/0x8c0 [ 1117.744351][ T30] asm_exc_page_fault+0x26/0x30 [ 1117.749246][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1117.755795][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1117.775924][ T30] RSP: 0000:ffffc90004737ad0 EFLAGS: 00050246 [ 1117.782046][ T30] RAX: ffffffff84b28a01 RBX: 0000000020022040 RCX: 0000000000000040 [ 1117.790125][ T30] RDX: 0000000000000000 RSI: ffffc90004737b60 RDI: 0000000020022000 [ 1117.798263][ T30] RBP: ffffc90004737c10 R08: ffffc90004737b9f R09: 1ffff920008e6f73 [ 1117.808375][ T30] R10: dffffc0000000000 R11: fffff520008e6f74 R12: 0000000000000040 [ 1117.816458][ T30] R13: 00000000000219c0 R14: 0000000020022000 R15: ffffc90004737b60 [ 1117.824802][ T30] ? _copy_from_user+0x61/0xe0 [ 1117.833473][ T30] _copy_to_user+0x86/0xb0 [ 1117.843595][ T30] rng_dev_read+0x3be/0x6d0 [ 1117.852874][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 1117.858829][ T30] ? security_file_permission+0x7f/0xa0 [ 1117.864902][ T30] ? rw_verify_area+0x52a/0x6b0 [ 1117.869894][ T30] vfs_readv+0x6c2/0xa90 [ 1117.874952][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 1117.880032][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 1117.885402][ T30] ? __fget_files+0x29/0x470 [ 1117.890059][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 1117.895548][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1117.901058][ T30] ? do_syscall_64+0x100/0x230 [ 1117.906403][ T30] ? do_syscall_64+0xb6/0x230 [ 1117.911137][ T30] do_syscall_64+0xf3/0x230 [ 1117.918943][ T30] ? clear_bhb_loop+0x35/0x90 [ 1117.925076][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.931030][ T30] RIP: 0033:0x7f1a8257cef9 [ 1117.936010][ T30] RSP: 002b:00007f1a833f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1117.945672][ T30] RAX: ffffffffffffffda RBX: 00007f1a82735f80 RCX: 00007f1a8257cef9 [ 1117.954183][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 1117.962197][ T30] RBP: 00007f1a825ef01e R08: 0000000000000000 R09: 0000000000000000 [ 1117.971727][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.979853][ T30] R13: 0000000000000000 R14: 00007f1a82735f80 R15: 00007f1a8285fa28 [ 1117.993944][ T30] [ 1118.004123][ T30] INFO: task syz.2.1601:17560 blocked for more than 145 seconds. [ 1118.011898][ T30] Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1118.033594][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1118.042318][ T30] task:syz.2.1601 state:D stack:23600 pid:17560 tgid:17557 ppid:16537 flags:0x00004006 [ 1118.053948][ T30] Call Trace: [ 1118.057272][ T30] [ 1118.060235][ T30] __schedule+0x1800/0x4a60 [ 1118.064895][ T30] ? __pfx___schedule+0x10/0x10 [ 1118.069788][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.077780][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1118.083297][ T30] ? schedule+0x90/0x320 [ 1118.087761][ T30] schedule+0x14b/0x320 [ 1118.091951][ T30] schedule_preempt_disabled+0x13/0x30 [ 1118.097534][ T30] __mutex_lock+0x6a4/0xd70 [ 1118.102064][ T30] ? __mutex_lock+0x527/0xd70 [ 1118.106821][ T30] ? hugetlb_fault+0x56f/0x3770 [ 1118.111697][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1118.116912][ T30] ? __lock_acquire+0x137a/0x2040 [ 1118.121980][ T30] hugetlb_fault+0x56f/0x3770 [ 1118.126820][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1118.132058][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1118.138481][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1118.144732][ T30] ? mt_find+0x226/0x850 [ 1118.149765][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.156688][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1118.161866][ T30] ? mt_find+0x62d/0x850 [ 1118.166232][ T30] ? mt_find+0x226/0x850 [ 1118.170659][ T30] ? __pfx_mt_find+0x10/0x10 [ 1118.175428][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1118.180744][ T30] ? find_vma+0xf9/0x170 [ 1118.185078][ T30] ? __pfx_find_vma+0x10/0x10 [ 1118.189782][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.195896][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.202259][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1118.208807][ T30] exc_page_fault+0x2b9/0x8c0 [ 1118.213645][ T30] asm_exc_page_fault+0x26/0x30 [ 1118.218536][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 1118.223782][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1118.245415][ T30] RSP: 0018:ffffc90004747778 EFLAGS: 00050202 [ 1118.252192][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 1118.260386][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d40 [ 1118.268439][ T30] RBP: ffffc90004747ec8 R08: ffffffff90186f2f R09: 1ffffffff2030de5 [ 1118.277417][ T30] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: 1ffff920008e8f7d [ 1118.285508][ T30] R13: 1ffff920008e8f08 R14: 0000000020800000 R15: 0000000000800000 [ 1118.293509][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 1118.298728][ T30] ? stack_trace_save+0x118/0x1d0 [ 1118.303942][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1118.309440][ T30] ? stack_depot_save_flags+0x29/0x830 [ 1118.315863][ T30] ? kasan_save_track+0x51/0x80 [ 1118.320776][ T30] ? kasan_save_track+0x3f/0x80 [ 1118.325757][ T30] ? kasan_save_free_info+0x40/0x50 [ 1118.330979][ T30] ? poison_slab_object+0xe0/0x150 [ 1118.336225][ T30] ? __kasan_slab_free+0x37/0x60 [ 1118.341197][ T30] ? kfree+0x149/0x360 [ 1118.345345][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 1118.351014][ T30] ? security_file_ioctl+0x75/0xb0 [ 1118.358824][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1118.363750][ T30] ? do_syscall_64+0xf3/0x230 [ 1118.368457][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.374600][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 1118.379400][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1118.384561][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.390930][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1118.396951][ T30] ? __pfx_lock_release+0x10/0x10 [ 1118.402022][ T30] ? kfree+0x149/0x360 [ 1118.406180][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1118.411995][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1118.418101][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.424177][ T30] ? __pfx_hook_file_ioctl+0x10/0x10 [ 1118.429475][ T30] ? __se_sys_ioctl+0x30/0x170 [ 1118.434326][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1118.439303][ T30] ? security_file_ioctl+0x87/0xb0 [ 1118.444500][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1118.449987][ T30] __se_sys_ioctl+0xfc/0x170 [ 1118.455337][ T30] do_syscall_64+0xf3/0x230 [ 1118.459876][ T30] ? clear_bhb_loop+0x35/0x90 [ 1118.466461][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.472392][ T30] RIP: 0033:0x7f1a8257cef9 [ 1118.476976][ T30] RSP: 002b:00007f1a833cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.485525][ T30] RAX: ffffffffffffffda RBX: 00007f1a82736058 RCX: 00007f1a8257cef9 [ 1118.493514][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 1118.501581][ T30] RBP: 00007f1a825ef01e R08: 0000000000000000 R09: 0000000000000000 [ 1118.509700][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1118.517756][ T30] R13: 0000000000000000 R14: 00007f1a82736058 R15: 00007f1a8285fa28 [ 1118.525873][ T30] [ 1118.528952][ T30] [ 1118.528952][ T30] Showing all locks held in the system: [ 1118.540573][ T30] 1 lock held by khungtaskd/30: [ 1118.546410][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1118.560968][ T30] 1 lock held by udevd/4689: [ 1118.565786][ T30] 2 locks held by getty/4988: [ 1118.570485][ T30] #0: ffff8880305430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1118.581532][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1118.591772][ T30] 3 locks held by kworker/1:3/5235: [ 1118.597039][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1118.608084][ T30] #1: ffffc900034efd00 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1118.618328][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1118.629364][ T30] 5 locks held by kworker/u8:9/11983: [ 1118.634849][ T30] 3 locks held by kworker/u8:3/16760: [ 1118.640256][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1118.651917][ T30] #1: ffffc9000376fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1118.667200][ T30] #2: ffff8880b892a718 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x744/0xeb0 [ 1118.676296][ T30] 2 locks held by syz.2.1601/17557: [ 1118.681500][ T30] #0: ffff88805ef8f3d0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 1118.694058][ T30] #1: ffff8880216882a8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 1118.704822][ T30] 3 locks held by syz.2.1601/17558: [ 1118.710025][ T30] #0: ffff888034710b18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1118.721122][ T30] #1: ffff8880216882a8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1118.732208][ T30] #2: ffff88802f8910e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 1118.742233][ T30] 2 locks held by syz.2.1601/17560: [ 1118.747532][ T30] #0: ffff888034710b18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 1118.757725][ T30] #1: ffff8880216882a8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1118.769440][ T30] [ 1118.771819][ T30] ============================================= [ 1118.771819][ T30] [ 1118.780453][ T30] NMI backtrace for cpu 1 [ 1118.784814][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1118.795334][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1118.805383][ T30] Call Trace: [ 1118.808663][ T30] [ 1118.811620][ T30] dump_stack_lvl+0x241/0x360 [ 1118.816298][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.821490][ T30] ? __pfx__printk+0x10/0x10 [ 1118.826073][ T30] ? vprintk_emit+0x667/0x7c0 [ 1118.830743][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1118.835768][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1118.840710][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1118.846163][ T30] ? _printk+0xd5/0x120 [ 1118.850309][ T30] ? __pfx__printk+0x10/0x10 [ 1118.854889][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1118.859733][ T30] ? __pfx__printk+0x10/0x10 [ 1118.864319][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1118.869341][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1118.875318][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1118.881300][ T30] watchdog+0xff4/0x1040 [ 1118.885545][ T30] ? watchdog+0x1ea/0x1040 [ 1118.890056][ T30] ? __pfx_watchdog+0x10/0x10 [ 1118.894732][ T30] kthread+0x2f0/0x390 [ 1118.898800][ T30] ? __pfx_watchdog+0x10/0x10 [ 1118.903470][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.908229][ T30] ret_from_fork+0x4b/0x80 [ 1118.912658][ T30] ? __pfx_kthread+0x10/0x10 [ 1118.917244][ T30] ret_from_fork_asm+0x1a/0x30 [ 1118.922018][ T30] [ 1118.930449][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1118.936594][ C0] NMI backtrace for cpu 0 [ 1118.936611][ C0] CPU: 0 UID: 0 PID: 5288 Comm: kworker/0:5 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1118.936631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1118.936642][ C0] Workqueue: events nsim_dev_trap_report_work [ 1118.936663][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 1118.936687][ C0] Code: 00 00 00 48 8b 3d 6c 76 96 0c 48 89 de 5b e9 83 9d 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 40 4a 70 7e 81 e2 [ 1118.936700][ C0] RSP: 0018:ffffc900037c77b8 EFLAGS: 00000006 [ 1118.936711][ C0] RAX: ffffffff8543ccfc RBX: 0000000000000000 RCX: ffff88802e513c00 [ 1118.936721][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.936731][ C0] RBP: ffffc900037c7970 R08: ffffffff8543ccf2 R09: 1ffffffff283c925 [ 1118.936743][ C0] R10: dffffc0000000000 R11: fffffbfff283c926 R12: 000000000000001d [ 1118.936756][ C0] R13: 1ffff1101710752e R14: 0000000000000046 R15: ffff8880b883a978 [ 1118.936767][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1118.936781][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.936794][ C0] CR2: 00007f5ab98fa678 CR3: 000000002882c000 CR4: 00000000003506f0 [ 1118.936809][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.936818][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1118.936829][ C0] Call Trace: [ 1118.936835][ C0] [ 1118.936844][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1118.936864][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1118.936886][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1118.936904][ C0] ? nmi_handle+0x2a/0x5a0 [ 1118.936927][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1118.936946][ C0] ? nmi_handle+0x14f/0x5a0 [ 1118.936961][ C0] ? nmi_handle+0x2a/0x5a0 [ 1118.936977][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 1118.936995][ C0] ? default_do_nmi+0x63/0x160 [ 1118.937013][ C0] ? exc_nmi+0x123/0x1f0 [ 1118.937031][ C0] ? end_repeat_nmi+0xf/0x53 [ 1118.937053][ C0] ? crng_make_state+0x542/0xa80 [ 1118.937073][ C0] ? crng_make_state+0x54c/0xa80 [ 1118.937093][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 1118.937113][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 1118.937133][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 1118.937151][ C0] [ 1118.937157][ C0] [ 1118.937163][ C0] crng_make_state+0x5d2/0xa80 [ 1118.937185][ C0] ? crng_make_state+0x196/0xa80 [ 1118.937205][ C0] ? __pfx_crng_make_state+0x10/0x10 [ 1118.937241][ C0] _get_random_bytes+0xd7/0x2c0 [ 1118.937269][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 1118.937298][ C0] ? skb_put+0x114/0x1f0 [ 1118.937317][ C0] nsim_dev_trap_report_work+0x301/0xaa0 [ 1118.937342][ C0] ? process_scheduled_works+0x945/0x1830 [ 1118.937361][ C0] process_scheduled_works+0xa2c/0x1830 [ 1118.937393][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1118.937416][ C0] ? assign_work+0x364/0x3d0 [ 1118.937437][ C0] worker_thread+0x86d/0xd10 [ 1118.937460][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1118.937484][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1118.937505][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1118.937523][ C0] kthread+0x2f0/0x390 [ 1118.937538][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1118.937556][ C0] ? __pfx_kthread+0x10/0x10 [ 1118.937570][ C0] ret_from_fork+0x4b/0x80 [ 1118.937589][ C0] ? __pfx_kthread+0x10/0x10 [ 1118.937603][ C0] ret_from_fork_asm+0x1a/0x30 [ 1118.937631][ C0] [ 1119.287348][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1119.294237][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 1119.304759][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1119.314832][ T30] Call Trace: [ 1119.318107][ T30] [ 1119.321050][ T30] dump_stack_lvl+0x241/0x360 [ 1119.325723][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1119.330912][ T30] ? __pfx__printk+0x10/0x10 [ 1119.335491][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1119.341472][ T30] ? vscnprintf+0x5d/0x90 [ 1119.345798][ T30] panic+0x349/0x860 [ 1119.349692][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1119.355837][ T30] ? __pfx_panic+0x10/0x10 [ 1119.360266][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1119.365650][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1119.371315][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1119.376716][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1119.382918][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1119.389095][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1119.395287][ T30] watchdog+0x1033/0x1040 [ 1119.399668][ T30] ? watchdog+0x1ea/0x1040 [ 1119.404108][ T30] ? __pfx_watchdog+0x10/0x10 [ 1119.408791][ T30] kthread+0x2f0/0x390 [ 1119.412855][ T30] ? __pfx_watchdog+0x10/0x10 [ 1119.417526][ T30] ? __pfx_kthread+0x10/0x10 [ 1119.422129][ T30] ret_from_fork+0x4b/0x80 [ 1119.426573][ T30] ? __pfx_kthread+0x10/0x10 [ 1119.431165][ T30] ret_from_fork_asm+0x1a/0x30 [ 1119.435954][ T30] [ 1119.439303][ T30] Kernel Offset: disabled [ 1119.443630][ T30] Rebooting in 86400 seconds..