last executing test programs: 18.883904167s ago: executing program 1 (id=1550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000202c0004802800018007000100637400001c0002800800014000000002080002400000000c05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x500, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 18.455762444s ago: executing program 1 (id=1553): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x3d4}}, 0x0) 18.172747176s ago: executing program 1 (id=1555): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 17.154785255s ago: executing program 1 (id=1557): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000020c0)=ANY=[@ANYBLOB="20c300bc90c3777167ad35c7a9d3d326a7000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000c0017010000000000000000"], 0x20}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002140), 0x20000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000002200)=""/102387, 0x18ff3}], 0x1, 0x0, 0x1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000005, 0x10, r2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000002180)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x9, 0x7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x0, 0x3, 0x20ffa000}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040), 0x4) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002080)={0x20, 0x0, r8}, 0x20) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x0) r11 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) splice(r7, 0x0, r11, 0x0, 0x2000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000909000000ff054900"], 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001800050100000000000000000b000000fe00000b002000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) 15.96924462s ago: executing program 1 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r2 = dup2(r0, r0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000080)={"92d7b963", 0x9, 0x74, 0x3, 0x2, 0x1, "1ecbe6e588f420724ac7aaac7d1b07", "423a0af3", "eda7880c", "8bbdeed8", ["97d720faafd42e2932182433", "31a96af0423fbb2efb61b5ed", "c87cc8b89678b67a93561339", "068563507cea7a7a90ee7335"]}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x38}}, 0x0) 15.818372624s ago: executing program 1 (id=1560): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000000706e90300000000000000000000000008000638000000020500010007", @ANYBLOB="b90ff9ce397b25a36f6272614598664f7a9ee416b462dccb4c5c7969623e8153bea934131152bf32f4df9d77920feb9349f0185a", @ANYRESDEC, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000780)={0x2c, &(0x7f00000004c0)={0x20, 0x3, 0x70, {0x70, 0x21, "ae6ef2f304d26cdc7be90cf9600336ac8c65b95b55494a75efe5437f336efd064436b13fec05cea4e6eee45f60d4af7cbca358753bd57e5e51db72c043976770d9e512ffdacb4fd412371010e0d9550a7dd839e6e0d8d0e1bf19e7ce1d09d0906475e4f8dd6fee7de4dcdcbe3456"}}, &(0x7f0000000380)={0x0, 0x3, 0x95, @string={0x95, 0x3, "0bb74011f643d07d85f7572714af7873b3a6f531d30d941d382c56f1ec45abf4e8fbfd93b5cfd3dace8be4000000000000000000000000000000d3570f58491cc73b703917182d62ef61b934d875715dee8754771915ccd83efba7e53922cb51bc4a0520029a45169380d84a00f1a4a9498d23848ff92a783db9c10b0000000000000013264f5a3be2c630283ebf95fd4b0ad4"}}, &(0x7f0000001cc0)=ANY=[@ANYRES8=0x0, @ANYBLOB, @ANYRESOCT, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT, @ANYBLOB="a8d239772e3428135fd7f6", @ANYRESDEC], &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x3, 0x5, "bd62fd47", "e67bfd40"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0xff, 0x10, 0x7, 0xa431, 0xe}}}, &(0x7f0000001c00)={0x84, &(0x7f00000007c0)={0x40, 0x6, 0x25, "af73c492c2d26e813c33dab80ea983936341ccbc878ea55411b48cdaf88d04e36cee6bed44b8341263cb52d1fb9a022ed390177cec36"}, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x100, 0x8, [0xf0]}}, &(0x7f0000000900)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, &(0x7f0000001a40)={0x40, 0x13, 0x6, @random="000000000600"}, &(0x7f0000001a80)={0x40, 0x17, 0x6, @random="a99e150c1c12"}, &(0x7f0000001ac0)={0x40, 0x19, 0x2, "f2ff"}, &(0x7f0000001b00)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000001b40)={0x40, 0x1c, 0x1, 0xf}, 0x0, &(0x7f0000001bc0)={0x40, 0x21, 0x1, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0x80000000, 0x3, 0x4, 0x2, 0x4, 0x7f, 0xa2}, {0x80000007, 0x1, 0x0, 0x2, 0x89b, 0x80, 0xc2f}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, "dd93105df100"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000011c0)) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) syz_usb_disconnect(r4) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000280)) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000980), 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/85, 0x55}, {&(0x7f0000000b40)=""/44, 0x2c}, {&(0x7f0000000e80)=""/205, 0xcd}], 0x3, &(0x7f0000000e00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) fsopen(0x0, 0x0) 5.367067862s ago: executing program 2 (id=1605): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xc}) 5.100594547s ago: executing program 3 (id=1607): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x826, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf, @void, @value, @void, @value}, 0x48) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000010c0), 0x0) r3 = io_uring_setup(0x489e, &(0x7f0000000480)={0x0, 0x0, 0x800}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000012090212000100000000090400000080829900"], 0x0) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.012916193s ago: executing program 2 (id=1608): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100007f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000e5ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd40020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) 4.867436432s ago: executing program 0 (id=1610): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x4], [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 4.701374956s ago: executing program 0 (id=1611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40094}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x10}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x2}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0xa3}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x90}}, 0x804c814) 4.700658807s ago: executing program 2 (id=1612): r0 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x3}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r2 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x84) r7 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r7) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@my=0x1}, 0x1, 0x0, 0x25}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r6, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r4, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xa0002008}) close_range(r0, 0xffffffffffffffff, 0x0) 4.449580925s ago: executing program 2 (id=1614): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xf, 0x80000, 0x40) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008009900000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x3, 0x51, &(0x7f0000000600)=""/81, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000080)={0xfffffffe, 0xfffffffc, 0xff, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x8}, {0x3, 0x3, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x4}, {0x0, 0x5, 0x9, 0x2}, {0x5, 0x4, 0x7, 0x9}], 0x10, 0x200, @void, @value}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000004c0)=0x9, 0x1) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe300000001ffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x20, 0x0, 0x9, &(0x7f0000000480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000600)}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r8, r8, 0x0, 0x20000000003f) r9 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRESHEX=r5, @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r4, @ANYRESHEX=r7, @ANYBLOB="551dc73b435297ba1f553d79d246383b41584314ef4c8a392cbad7668056a26a55e04d657a663bffb3cba2609504ab9086a8c96bee8562cf19f828c26c3b332fd067f0c474611e995118bb3a15e904a654f5456e77d46123b5ce391940f131e57258c8114fc9", @ANYRES8=r9], 0x20) getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = socket$unix(0x1, 0x5, 0x0) r12 = dup2(r11, r10) close_range(r12, 0xffffffffffffffff, 0x0) 4.407921932s ago: executing program 0 (id=1615): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000004c0)=@urb_type_iso={0x0, {0x6, 0x1}, 0x8, 0x0, &(0x7f0000000240)="96ed959c4782f5569219ebe36635d40bf798b4e1c85fc0ee791368e4777f931609553e9d33ef129afb174bdfcf773b3a7afcc529b5054f78083b37f368b95c9036e59c326db454d55beaa34cd88c28895c4e0c7232290595e4be9f249d2ea9e9fb32557fed18381b77ea77c89c3f562bfc79a3a1f6d09144eb", 0x79, 0x400, 0xd, 0x38, 0x3, 0xa, &(0x7f00000002c0)="dcdf4cb27bc237c74a1a0406810c42c72cc390748f143db9e47040ed4746fd20204d07771671ab394f2a29827c0a5b98926f660b405a22c914e18c9dd6328a06cb38e654cd3c57d92df64e104d90c8a52a3a3eb70a563dcefbcb14736434ed438c462730b3a9087dec7e517505c84b148293", [{0x101, 0xffffffff, 0x3e}, {0x7, 0x2, 0x9}, {0x3, 0x2, 0xb}, {0x7, 0x5, 0x10001}, {0x2, 0x3ff, 0x800}, {0x10001, 0x3800000, 0x7fffffff}, {0xa, 0xffffff7f, 0x6}, {0x9, 0xda4, 0x100}, {0x6, 0xffffffff}, {0x0, 0x9, 0x9}, {0xffffffff, 0x2000, 0x10001}, {0x7e24, 0x7, 0x4}, {0x2, 0x1fda, 0x3}, {0x1, 0x3, 0x8}, {0xde3, 0x400, 0x4}, {0x1000, 0x2, 0x7f}, {0x9, 0x9, 0x80000001}, {0x5, 0x1, 0x4}, {0x7, 0x5}, {0xfffffc01, 0x8, 0x40}, {0x2, 0x8, 0x1}, {0x4d, 0x9, 0x8}, {0xe4c7, 0x9c, 0x4}, {0x664, 0xae9, 0xe76e}, {0x2953, 0xe5, 0x4}, {0x4, 0x7, 0x3}, {0xa, 0x6, 0x9}, {0x0, 0xac, 0x3}, {0xd3f2, 0x66, 0x8}, {0x6, 0x3ff, 0x3}, {0x14b, 0x1, 0xa}, {0x6, 0x6, 0x239}, {0x2ae, 0xda1, 0x3}, {0x4, 0x2, 0x2}, {0x80, 0x1000, 0x8}, {0x3, 0x8, 0x7fd}, {0xfffffffc, 0x3, 0x1}, {0x8, 0x4, 0x7}, {0x8d, 0xb22, 0xa5}, {0x1, 0xffffffff, 0x80}, {0x8, 0x3, 0x5}, {0x1, 0x7, 0x240}, {0x0, 0x2, 0x6}, {0x4, 0x80000000, 0x5}, {0xfffff801, 0x3d0, 0x10001}, {0x3, 0x7fff, 0x4}, {0xc, 0x6, 0x6}, {0xe37a, 0x81, 0xece}, {0x6, 0x55, 0x8}, {0x6, 0x4, 0xfb22}, {0xa83, 0x80000001}, {0x9, 0x10001, 0x5}, {0x9c1, 0xf, 0x9}, {0x300000, 0x10001, 0xc770}, {0x9, 0x7fff, 0xad}, {0x1ff, 0x100, 0xd}]}) socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001ec0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001f00)={@rand_addr, @empty}, &(0x7f0000001f40)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000028c0)={0x0, @empty, @initdev}, &(0x7f0000002900)=0xc) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) 3.938965225s ago: executing program 0 (id=1616): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) socket(0x200000100000011, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x7fff7ffd}]}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) fchmod(r2, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="020200030c000000000000000000000001000900"], 0x60}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 3.413199427s ago: executing program 2 (id=1618): syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGE(r2, 0x40184810, 0x0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000480)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) 3.340714707s ago: executing program 0 (id=1619): syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGE(r2, 0x40184810, 0x0) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000480)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2021, 0x0) 1.941483587s ago: executing program 4 (id=1622): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0xc}) 1.891190349s ago: executing program 3 (id=1623): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0x5, 0x4) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0) 1.773336788s ago: executing program 4 (id=1624): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x3d4}}, 0x0) 1.760434162s ago: executing program 3 (id=1625): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, 0x0}, 0x0) (async) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) (async, rerun: 64) r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) (async, rerun: 64) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (rerun: 32) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) (async) unshare(0x400) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) sendmmsg$inet(r6, &(0x7f0000000100)=[{{&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c040) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r7, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 32) capset(&(0x7f0000000300)={0x20080522}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"}) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r2}, &(0x7f0000000040)=""/248, 0xf8, &(0x7f0000000200)={&(0x7f0000000740)={'rmd160\x00'}}) (async) r9 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', 0x0, 0xa}) 1.678228418s ago: executing program 4 (id=1626): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.575069847s ago: executing program 3 (id=1627): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xf, 0x80000, 0x40) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008009900000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES8=r2], &(0x7f0000000000)='GPL\x00', 0x3, 0x51, &(0x7f0000000600)=""/81, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000080)={0xfffffffe, 0xfffffffc, 0xff, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x8}, {0x3, 0x3, 0xf, 0x4}, {0x4, 0x1, 0xc, 0x4}, {0x0, 0x5, 0x9, 0x2}, {0x5, 0x4, 0x7, 0x9}], 0x10, 0x200, @void, @value}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000004c0)=0x9, 0x1) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe300000001ffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x20, 0x0, 0x9, &(0x7f0000000480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000600)}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r8, r8, 0x0, 0x20000000003f) r9 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRESHEX=r5, @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES32=r4, @ANYRESHEX=r7, @ANYBLOB="551dc73b435297ba1f553d79d246383b41584314ef4c8a392cbad7668056a26a55e04d657a663bffb3cba2609504ab9086a8c96bee8562cf19f828c26c3b332fd067f0c474611e995118bb3a15e904a654f5456e77d46123b5ce391940f131e57258c8114fc9", @ANYRES8=r9], 0x20) getpgrp(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = socket$unix(0x1, 0x5, 0x0) r12 = dup2(r11, r10) close_range(r12, 0xffffffffffffffff, 0x0) 623.093911ms ago: executing program 4 (id=1628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x5aa4}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000100)="ea", 0xff82, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r1 = getpgrp(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000014080008400000000114000000110001"], 0x6c}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) (async) syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_tables_matches\x00') (async) syz_usb_connect(0x0, 0x72, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c46f3d08a905302612550000000109026000010000000009040000000e0100001924010000000201020c2402"], 0x0) 259.372852ms ago: executing program 4 (id=1629): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60010000100033060000000000000000ac1e0001000000000000000000000174ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00ed2954a5a9dfdc51"], 0x160}}, 0x0) 189.765273ms ago: executing program 3 (id=1630): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) socket(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300080000000800"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="08ea000015a1"]) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x180) rmdir(&(0x7f0000000040)='./control\x00') landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x8200, 0x0) lseek(r4, 0x100002, 0x0) getdents(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) semget(0x2, 0x3, 0x100) sendmsg$nl_xfrm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="e4010000160011040000000000000000fc000000000000000000000000000000fc0100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000029df4a373df8eb3600000000000000000000000000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fefefffd08001600000500"/236, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000000000000e000000100"/168], 0x1e4}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r8 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r8, 0xffffffffffff9000) 1.524622ms ago: executing program 0 (id=1631): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r2, 0x0, r3}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x3}}, 0x10) syz_usb_connect$printer(0x6, 0x13, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x3, 0x4, 0xff, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x8, 0x6, 0x4, 0x2000, 0x5b9, {0x77359400}, {0x4, 0x8, 0x6, 0x2, 0x81, 0x0, "42202285"}, 0x9, 0x4, {0xffffffffffffffff}, 0xff}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') read$FUSE(r8, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000240)=@multiplanar_fd={0x7f, 0x6, 0x4, 0x1000, 0x0, {}, {0x2, 0x0, 0x3, 0x10, 0x4, 0xe, "dc104d29"}, 0x8, 0x4, {&(0x7f0000000180)=[{0x2, 0xffffffba, {r6}, 0x7}, {0x6, 0x9, {}, 0xd204}]}, 0xaf, 0x0, r8}) 974.367µs ago: executing program 2 (id=1632): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x21, 0x0, 0x0, 0x0, 0x826, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf, @void, @value, @void, @value}, 0x48) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000010c0), 0x0) r3 = io_uring_setup(0x489e, &(0x7f0000000480)={0x0, 0x0, 0x800}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000012090212000100000000090400000080829900"], 0x0) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 248.011µs ago: executing program 3 (id=1633): r0 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x3}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r2 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') read$FUSE(r5, &(0x7f0000003700)={0x2020}, 0x2020) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x12345}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x84) r7 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, 0x0, 0x0, r7) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000000c0)={{@my=0x1}, 0x1, 0x0, 0x25}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r6, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mq_timedsend(r4, &(0x7f0000000440)="ba161ff9cd02fc4d9ee11a3fca48620ab2db095025bbff0aaffcd2e0f604cc375ab2cd51a421286f0484c9345a60e13935fa09f975f501e10e06c7b2183646324409ffd47faf3d5220e0baa26d75d4e4c0aa15a9cb1cef723ba1906d9882", 0x5e, 0x9, 0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xa0002008}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1634): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0xc}) kernel console output (not intermixed with test programs): 6.249169][ T5232] Bluetooth: hci0: command tx timeout [ 496.386409][T12120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.460895][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.487614][T12124] program syz.0.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.540363][T12124] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1273'. [ 496.620310][T12053] chnl_net:caif_netlink_parms(): no params data found [ 496.669096][T11955] veth0_vlan: entered promiscuous mode [ 496.826235][T12132] netlink: 88 bytes leftover after parsing attributes in process `&²'. [ 496.838432][T12132] netlink: 8 bytes leftover after parsing attributes in process `&²'. [ 496.898653][T11955] veth1_vlan: entered promiscuous mode [ 497.032757][T11955] veth0_macvtap: entered promiscuous mode [ 497.043194][T11955] veth1_macvtap: entered promiscuous mode [ 497.067732][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.079888][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.126036][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.156590][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.194542][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.250819][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.267805][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.285539][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.303405][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.313816][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.331112][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.347680][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.362518][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.379263][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.389723][T12053] bridge_slave_0: entered allmulticast mode [ 497.397935][T12053] bridge_slave_0: entered promiscuous mode [ 497.414599][T11955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.426431][T11955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.435583][ T5323] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 497.443387][ T5280] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 497.450110][T11955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.461481][T11955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.479175][T12053] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.488947][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.496331][T12053] bridge_slave_1: entered allmulticast mode [ 497.505455][T12053] bridge_slave_1: entered promiscuous mode [ 497.586953][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 497.594450][T12053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.608781][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 497.614411][ T5323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 497.620173][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 497.630314][ T5323] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 497.665460][T12053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.682098][ T5323] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 497.689473][ T5280] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 497.700629][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.708872][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.708905][ T5280] usb 5-1: Product: syz [ 497.718311][ T5323] usb 3-1: Product: syz [ 497.730877][ T5280] usb 5-1: Manufacturer: syz [ 497.737178][ T5323] usb 3-1: Manufacturer: syz [ 497.744729][ T5323] usb 3-1: SerialNumber: syz [ 497.768114][ T5323] usb 3-1: config 0 descriptor?? [ 497.819072][T12053] team0: Port device team_slave_0 added [ 497.823763][ T5280] usb 5-1: SerialNumber: syz [ 497.839594][ T5280] usb 5-1: config 0 descriptor?? [ 497.875976][T12053] team0: Port device team_slave_1 added [ 497.913373][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.937904][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.945852][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.966055][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.005019][T12053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.012470][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.048023][T12053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.092844][T12053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.101683][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.133665][T12053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.207969][ T5280] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 498.230395][ T5280] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 498.232985][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.270413][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.275872][ T5280] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 498.305953][T12053] hsr_slave_0: entered promiscuous mode [ 498.318945][ T5280] usb 5-1: USB disconnect, device number 63 [ 498.330643][ T5232] Bluetooth: hci0: command tx timeout [ 498.351313][T12053] hsr_slave_1: entered promiscuous mode [ 498.397122][T12053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.436684][T12053] Cannot create hsr debugfs directory [ 498.526252][ T29] audit: type=1326 audit(1728664449.445:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12169 comm="syz.0.1280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bc317dff9 code=0x0 [ 498.548369][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.043142][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.098013][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.136015][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.177449][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.214650][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.331653][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.387955][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.427649][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.454222][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.528183][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.583639][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.667216][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.772051][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.838453][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.146836][ T4877] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 500.258591][T12200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.286315][T12200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.300942][T12202] sctp: [Deprecated]: syz.2.1285 (pid 12202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.300942][T12202] Use struct sctp_sack_info instead [ 500.354207][T12053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 500.363848][ T4877] usb 5-1: Using ep0 maxpacket: 16 [ 500.380229][ T4877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.398296][ T4877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.407410][ T5232] Bluetooth: hci0: command tx timeout [ 500.434762][T12053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 500.480021][ T4877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 500.497390][T12053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 500.519347][ T4877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.524016][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.542867][T12053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 500.552782][ T4877] usb 5-1: Product: syz [ 500.569510][ T4877] usb 5-1: Manufacturer: syz [ 500.574257][ T4877] usb 5-1: SerialNumber: syz [ 500.597421][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.764000][T12212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'. [ 500.850514][ T4877] usb 5-1: cannot find UAC_HEADER [ 500.924000][ T4877] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 500.977589][ T4877] usb 5-1: USB disconnect, device number 64 [ 500.987379][T12053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.058121][T11920] udevd[11920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 501.100911][T12053] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.150648][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.157998][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.222570][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.229919][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.735621][T12053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.199225][T12053] veth0_vlan: entered promiscuous mode [ 502.318059][T12053] veth1_vlan: entered promiscuous mode [ 502.529860][T12053] veth0_macvtap: entered promiscuous mode [ 502.583781][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.626075][T12053] veth1_macvtap: entered promiscuous mode [ 502.667530][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.742159][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.753007][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.763429][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.774370][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.784402][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.795321][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.810637][T12053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.813183][ T5284] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 502.822027][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.827266][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.836350][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.852645][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.859392][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.870127][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.880649][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.891706][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.901789][T12053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.912714][T12053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.924577][T12053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.052945][T12053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.075665][T12053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.098346][ T5284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.133460][T12053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.172259][T12053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.237064][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 503.782299][T12245] xt_cgroup: invalid path, errno=-2 [ 503.797322][ T5284] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 503.806678][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.814722][ T5284] usb 5-1: Product: syz [ 503.879947][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.908579][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.925764][ T5284] usb 5-1: Manufacturer: syz [ 503.946755][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.962363][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.052195][ T5284] usb 5-1: SerialNumber: syz [ 504.127728][ T5284] usb 5-1: config 0 descriptor?? [ 505.395342][ T5323] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 505.570079][ T5323] usb 4-1: Using ep0 maxpacket: 32 [ 505.708279][ T5323] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.719985][ T5323] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.730364][ T5323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.741547][ T5323] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 505.750708][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.774403][ T5323] usb 4-1: config 0 descriptor?? [ 506.138198][T12270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.230812][T12270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.296652][ T5323] usbhid 4-1:0.0: can't add hid device: -71 [ 506.302813][ T5323] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 506.322775][ T5323] usb 4-1: USB disconnect, device number 72 [ 506.405910][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.443513][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.595161][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.743890][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.793378][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.882765][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.985910][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.014376][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.784113][ T5284] option 5-1:0.0: GSM modem (1-port) converter detected [ 507.807449][ T5284] usb 5-1: USB disconnect, device number 65 [ 507.836899][ T5284] option 5-1:0.0: device disconnected [ 507.868326][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.947004][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.099891][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1299'. [ 508.119994][T12288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'. [ 508.786960][ T5284] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 509.026881][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 509.040271][ T5284] usb 5-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 509.050089][ T5284] usb 5-1: config 0 has an invalid interface number: 153 but max is 97 [ 509.059197][ T5284] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 509.068325][ T5284] usb 5-1: config 0 has no interface number 0 [ 509.085284][ T5284] usb 5-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 509.095145][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.104086][ T5284] usb 5-1: Product: syz [ 509.108541][ T5284] usb 5-1: Manufacturer: syz [ 509.113331][ T5284] usb 5-1: SerialNumber: syz [ 509.121741][ T5284] usb 5-1: config 0 descriptor?? [ 509.137691][ T5284] sierra 5-1:0.153: Sierra USB modem converter detected [ 509.158123][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.181505][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.383329][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 509.842195][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1305'. [ 509.868926][T12307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.905555][T12307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.814436][T12320] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1307'. [ 510.838621][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.906042][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.664172][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 512.443851][ T5284] usb 5-1: USB disconnect, device number 66 [ 512.487341][ T5284] sierra 5-1:0.153: device disconnected [ 513.220398][T12364] xt_cgroup: invalid path, errno=-2 [ 513.411818][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.499903][ T2953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.642669][ T2953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.839012][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.869894][ T2953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.886928][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.922699][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.937123][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.947759][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.962198][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.975465][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.985490][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.995963][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.005408][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 514.013005][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.065717][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.151684][T12373] netlink: zone id is out of range [ 514.166972][T12373] netlink: zone id is out of range [ 514.203051][T12373] netlink: zone id is out of range [ 514.221472][ T2953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.232502][T12373] netlink: zone id is out of range [ 514.302788][T12373] netlink: zone id is out of range [ 514.346151][T12373] netlink: zone id is out of range [ 514.380264][T12373] netlink: zone id is out of range [ 514.385690][T12373] netlink: zone id is out of range [ 514.418747][T12373] netlink: zone id is out of range [ 514.586695][ T5284] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 514.748952][ T5284] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 514.764840][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.788115][ T5284] usb 4-1: config 0 descriptor?? [ 514.822512][ T5284] pwc: Samsung MPC-C10 USB webcam detected. [ 514.895088][ T2953] bridge_slave_1: left allmulticast mode [ 514.901402][ T2953] bridge_slave_1: left promiscuous mode [ 514.908189][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.915911][ T29] audit: type=1326 audit(1728664465.835:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 514.941067][ T2953] bridge_slave_0: left allmulticast mode [ 514.941106][ T29] audit: type=1326 audit(1728664465.835:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 514.954416][ T2953] bridge_slave_0: left promiscuous mode [ 514.973244][ T29] audit: type=1326 audit(1728664465.835:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 514.991513][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.015302][ T5284] pwc: send_video_command error -71 [ 515.021246][ T5284] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 515.036313][ T5284] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 515.042284][ T29] audit: type=1326 audit(1728664465.835:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 515.048935][ T5284] usb 4-1: USB disconnect, device number 73 [ 515.078957][ T29] audit: type=1326 audit(1728664465.835:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 515.114654][ T29] audit: type=1326 audit(1728664465.835:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 515.140607][ T29] audit: type=1326 audit(1728664465.835:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 515.163258][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.207175][ T29] audit: type=1326 audit(1728664465.835:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f680cf7dff9 code=0x7ffc0000 [ 515.229576][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.604862][ T5284] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 515.745186][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.760325][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.773697][ T2953] bond0 (unregistering): Released all slaves [ 515.781798][ T5284] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 515.796509][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.816239][ T5284] usb 4-1: config 0 descriptor?? [ 515.873205][ T5284] pwc: Samsung MPC-C10 USB webcam detected. [ 515.934469][T12378] chnl_net:caif_netlink_parms(): no params data found [ 516.131881][ T5232] Bluetooth: hci3: command tx timeout [ 516.157175][ T5323] usb 1-1: USB disconnect, device number 74 [ 516.185147][ T5323] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 516.288472][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.291628][T12408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.332583][ T5284] pwc: recv_control_msg error -32 req 02 val 2b00 [ 516.358477][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.367100][ T5284] pwc: recv_control_msg error -32 req 02 val 2700 [ 516.406829][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.407544][ T5284] pwc: recv_control_msg error -32 req 04 val 1700 [ 516.436917][T12408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.457899][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.465698][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 516.492142][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.533532][ T5284] pwc: recv_control_msg error -32 req 02 val 2c00 [ 516.576701][ T5284] pwc: recv_control_msg error -32 req 04 val 1000 [ 516.586833][ T5284] pwc: recv_control_msg error -32 req 04 val 1300 [ 516.603579][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 516.613665][ T5284] pwc: recv_control_msg error -32 req 04 val 1400 [ 516.620975][ T5284] pwc: recv_control_msg error -32 req 02 val 2000 [ 516.631609][ T5284] pwc: recv_control_msg error -32 req 02 val 2100 [ 516.639245][ T5284] pwc: recv_control_msg error -32 req 02 val 2200 [ 516.775705][T12378] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.791784][T12378] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.815221][T12378] bridge_slave_0: entered allmulticast mode [ 516.839869][T12378] bridge_slave_0: entered promiscuous mode [ 516.849181][ T5284] pwc: recv_control_msg error -71 req 04 val 1500 [ 516.863552][T12378] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.866894][ T5284] pwc: recv_control_msg error -71 req 02 val 2500 [ 516.877973][T12378] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.880431][ T5284] pwc: recv_control_msg error -71 req 02 val 2400 [ 516.905608][ T5284] pwc: recv_control_msg error -71 req 02 val 2600 [ 516.911239][T12378] bridge_slave_1: entered allmulticast mode [ 516.920320][ T5284] pwc: recv_control_msg error -71 req 02 val 2900 [ 516.933037][T12378] bridge_slave_1: entered promiscuous mode [ 516.941428][ T5284] pwc: recv_control_msg error -71 req 02 val 2800 [ 516.967828][ T5284] pwc: recv_control_msg error -71 req 04 val 1100 [ 516.981691][ T5284] pwc: recv_control_msg error -71 req 04 val 1200 [ 517.008990][ T5284] pwc: Registered as video71. [ 517.032819][ T5284] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 517.071218][ T5284] usb 4-1: USB disconnect, device number 74 [ 517.082579][ T2953] hsr_slave_0: left promiscuous mode [ 517.112242][ T2953] hsr_slave_1: left promiscuous mode [ 517.122130][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.152869][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.199851][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.225966][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.301482][ T2953] veth1_macvtap: left promiscuous mode [ 517.308033][ T2953] veth0_macvtap: left promiscuous mode [ 517.313916][ T2953] veth1_vlan: left promiscuous mode [ 517.320096][ T2953] veth0_vlan: left promiscuous mode [ 517.436404][T12430] xt_cgroup: invalid path, errno=-2 [ 517.505138][ T29] audit: type=1326 audit(1728664468.425:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12431 comm="syz.3.1335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd25db7dff9 code=0x0 [ 517.574486][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.600376][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.096467][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 518.174939][ T5232] Bluetooth: hci3: command tx timeout [ 518.224310][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 518.577072][ T5232] Bluetooth: hci5: command tx timeout [ 518.658792][ T5285] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 518.855485][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 518.872270][ T5285] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 518.881875][ T5285] usb 4-1: config 0 has no interface number 0 [ 518.891047][ T5285] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 518.909940][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.928239][ T5285] usb 4-1: Product: syz [ 518.932711][ T5285] usb 4-1: Manufacturer: syz [ 518.955805][ T5285] usb 4-1: SerialNumber: syz [ 518.979277][ T5285] usb 4-1: config 0 descriptor?? [ 519.087908][ T5285] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 519.222991][ C1] net_ratelimit: 10 callbacks suppressed [ 519.223044][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 519.368071][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.378695][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.438911][T12378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.592828][T12378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.774190][T12378] team0: Port device team_slave_0 added [ 519.798181][ T5285] gspca_spca1528: reg_w err -71 [ 519.827615][T12378] team0: Port device team_slave_1 added [ 519.844375][ T5285] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 519.881439][ T5285] usb 4-1: USB disconnect, device number 75 [ 520.155792][T12378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.179116][T12378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.222037][T12378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.227213][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.278101][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.287306][ T5232] Bluetooth: hci3: command tx timeout [ 520.403766][T12478] xt_cgroup: invalid path, errno=-2 [ 520.416935][T12378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.424486][T12378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.479378][T12378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.664886][T12378] hsr_slave_0: entered promiscuous mode [ 520.685358][T12378] hsr_slave_1: entered promiscuous mode [ 520.695864][T12378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.707846][T12378] Cannot create hsr debugfs directory [ 520.726477][ T5232] Bluetooth: hci5: command tx timeout [ 520.734751][T12419] chnl_net:caif_netlink_parms(): no params data found [ 520.761388][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 520.812893][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.007176][T12493] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 521.031133][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.043783][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.056949][T12419] bridge_slave_0: entered allmulticast mode [ 521.064520][T12419] bridge_slave_0: entered promiscuous mode [ 521.075494][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.083673][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.098309][T12419] bridge_slave_1: entered allmulticast mode [ 521.105644][T12419] bridge_slave_1: entered promiscuous mode [ 521.230672][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.277146][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.427003][T12419] team0: Port device team_slave_0 added [ 521.468553][T12419] team0: Port device team_slave_1 added [ 521.590967][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.617682][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.678973][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.700437][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.710957][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.718645][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.752783][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.753044][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.862221][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 521.896659][ T5323] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 522.098408][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.116397][ T5323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.134790][ T5323] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.151549][T12419] hsr_slave_0: entered promiscuous mode [ 522.155594][ T5323] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.168409][T12419] hsr_slave_1: entered promiscuous mode [ 522.175081][T12419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.183079][ T5323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.192440][T12419] Cannot create hsr debugfs directory [ 522.219434][ T5323] usb 4-1: config 0 descriptor?? [ 522.326699][ T5232] Bluetooth: hci3: command tx timeout [ 522.484886][T12378] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 522.535931][T12378] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 522.550709][T12378] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 522.578872][T12378] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 522.640052][ T5323] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 522.648877][ T5323] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 522.713705][T12419] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.817003][ T5232] Bluetooth: hci5: command tx timeout [ 522.840215][T12419] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.030215][T12378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.131897][T12378] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.221005][T12419] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.289780][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.297131][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.315327][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.322608][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.486393][T12419] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.659604][T12378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.685780][T12378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.864767][T12419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.901988][T12419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.961710][T12419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.992321][T12419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.034497][T12378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.252370][T12378] veth0_vlan: entered promiscuous mode [ 524.359159][T12378] veth1_vlan: entered promiscuous mode [ 524.441870][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.523399][T12419] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.594215][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.601425][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.662990][T12378] veth0_macvtap: entered promiscuous mode [ 524.714741][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.722067][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.763798][T12378] veth1_macvtap: entered promiscuous mode [ 524.860792][T12419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.886878][ T5232] Bluetooth: hci5: command tx timeout [ 524.890163][T12378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.917307][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.974361][T12378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.026183][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.098324][T12378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.142224][T12564] macvlan2: entered allmulticast mode [ 525.177853][T12564] mac80211_hwsim hwsim101 wlan0: entered promiscuous mode [ 525.185676][T12564] mac80211_hwsim hwsim101 wlan0: entered allmulticast mode [ 525.240225][T12564] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 525.377119][T12566] bond0: entered promiscuous mode [ 525.390772][T12566] bond_slave_0: entered promiscuous mode [ 525.398109][T12566] bond_slave_1: entered promiscuous mode [ 525.409683][T12566] macvlan2: entered promiscuous mode [ 525.440088][T12378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.456706][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.466878][T12378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.477576][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.491248][T12378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.506203][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.516785][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.527826][T12378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.539374][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.550833][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.563123][T12378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.651435][T12378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.664072][T12378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.686608][T12378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.695547][T12378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.727433][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.858109][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.881725][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.935983][T12419] veth0_vlan: entered promiscuous mode [ 525.960995][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.993533][T12419] veth1_vlan: entered promiscuous mode [ 525.995103][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.140147][T12419] veth0_macvtap: entered promiscuous mode [ 526.177331][T12419] veth1_macvtap: entered promiscuous mode [ 526.279268][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.325287][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.365717][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.387748][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.399019][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.427022][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.439889][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.452054][T12419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.502336][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.545483][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.572174][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 526.578753][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.608770][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.655418][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.691595][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.708484][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.736621][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.747480][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.770964][T12419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.805513][T12419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.845407][T12419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.869409][T12419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.878469][T12419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.887853][T12419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.896742][T12419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.098482][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.182044][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.267938][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.298220][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.384267][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.412836][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.477015][ T5284] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 527.678378][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.749999][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 527.797620][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 527.821110][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.858253][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.870948][ T5284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.889395][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.910302][ T5284] usb 5-1: config 0 descriptor?? [ 527.925759][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.009074][T12653] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 528.030815][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.052872][T12653] batadv0: entered promiscuous mode [ 528.075863][T12653] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 528.232478][T12646] xt_CONNSECMARK: invalid mode: 0 [ 528.451335][ T5280] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 528.485849][T12633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 528.905299][ T29] audit: type=1326 audit(1728664479.825:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25db7dff9 code=0x7ffc0000 [ 529.051803][T12663] bond1: entered promiscuous mode [ 529.057152][ T29] audit: type=1326 audit(1728664479.925:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25db7dff9 code=0x7ffc0000 [ 529.131128][T12663] bond1: entered allmulticast mode [ 529.180944][T12655] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.209457][ T29] audit: type=1326 audit(1728664479.925:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd25db7dff9 code=0x7ffc0000 [ 529.237571][ T5280] usb 1-1: unable to get BOS descriptor or descriptor too short [ 529.258022][ T5280] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 529.274550][ T5280] usb 1-1: can't read configurations, error -71 [ 529.294959][T12671] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.323385][ T29] audit: type=1326 audit(1728664479.925:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25db7dff9 code=0x7ffc0000 [ 529.373379][ T29] audit: type=1326 audit(1728664479.925:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25db7dff9 code=0x7ffc0000 [ 529.421510][ T29] audit: type=1326 audit(1728664479.925:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd25db7c990 code=0x7ffc0000 [ 529.473368][ T29] audit: type=1326 audit(1728664479.925:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd25db7dbfb code=0x7ffc0000 [ 529.507689][ T29] audit: type=1326 audit(1728664479.925:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd25db7dbfb code=0x7ffc0000 [ 529.543392][ T29] audit: type=1326 audit(1728664479.925:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd25db7dbfb code=0x7ffc0000 [ 529.584594][ T29] audit: type=1326 audit(1728664479.925:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.3.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd25db7dbfb code=0x7ffc0000 [ 530.196737][ T5280] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 530.266014][T12677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1376'. [ 530.267376][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 530.291270][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 530.305456][ T5284] usb 5-1: USB disconnect, device number 67 [ 530.412770][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 530.421823][ T5280] usb 1-1: config 0 has no interfaces? [ 530.432800][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.446355][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.466468][ T5280] usb 1-1: config 0 descriptor?? [ 530.624602][T12679] fuse: Unknown parameter 'no' [ 530.695938][T12675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.707553][T12675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.723119][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 530.732346][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 530.754179][ T5284] usb 1-1: USB disconnect, device number 76 [ 530.816652][T12688] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 531.136653][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 531.348437][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.364466][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.375802][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.389887][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.398996][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.409361][ T9] usb 5-1: config 0 descriptor?? [ 531.436792][ T5284] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 531.548471][ T5468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.576765][ T5284] usb 1-1: device descriptor read/64, error -71 [ 531.664512][ T5468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.819603][ T5468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.836933][ T5284] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 531.852740][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 531.869465][ T9] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 531.950834][ T5468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.979374][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 531.996717][ T5284] usb 1-1: device descriptor read/64, error -71 [ 532.005318][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.016636][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.028729][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.042070][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.051683][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 532.060617][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.084646][T12696] netlink: 'syz.3.1384': attribute type 3 has an invalid length. [ 532.115377][T12696] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1384'. [ 532.127265][ T5284] usb usb1-port1: attempt power cycle [ 532.232678][ T5468] bridge_slave_1: left allmulticast mode [ 532.253481][ T5468] bridge_slave_1: left promiscuous mode [ 532.270436][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.301670][ T5468] bridge_slave_0: left allmulticast mode [ 532.321135][ T5468] bridge_slave_0: left promiscuous mode [ 532.337282][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.466749][ T5284] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 532.508531][ T5284] usb 1-1: device descriptor read/8, error -71 [ 532.750451][T12716] xt_l2tp: missing protocol rule (udp|l2tpip) [ 532.772202][ T5284] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 532.797328][ T5284] usb 1-1: device descriptor read/8, error -71 [ 532.906988][ T5284] usb usb1-port1: unable to enumerate USB device [ 533.166340][ T5468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.182492][ T5468] bond_slave_0: left promiscuous mode [ 533.194628][ T5468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.210438][ T5468] bond_slave_1: left promiscuous mode [ 533.227204][ T5468] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 533.236175][ T5468] macvlan2: left promiscuous mode [ 533.245540][ T5468] mac80211_hwsim hwsim101 wlan0: left allmulticast mode [ 533.253711][ T5468] mac80211_hwsim hwsim101 wlan0: left promiscuous mode [ 533.274947][ T5468] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 533.288338][ T5468] batadv0: left promiscuous mode [ 533.296415][ T5468] bond0 (unregistering): Released all slaves [ 533.379486][ T8] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 533.606615][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.673877][T12728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1388'. [ 533.707903][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 533.778439][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 533.842435][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.866664][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.875773][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.907661][ T8] usb 1-1: config 0 descriptor?? [ 533.982363][ T5468] hsr_slave_0: left promiscuous mode [ 534.047747][ T5468] hsr_slave_1: left promiscuous mode [ 534.087643][ T5236] Bluetooth: hci4: command tx timeout [ 534.097331][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.104814][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.145648][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.157979][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.214902][ T5468] veth1_macvtap: left promiscuous mode [ 534.237049][ T5468] veth0_macvtap: left promiscuous mode [ 534.253612][ T5468] veth1_vlan: left promiscuous mode [ 534.266964][ T5468] veth0_vlan: left promiscuous mode [ 534.523481][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'. [ 535.603203][ T5468] team0 (unregistering): Port device team_slave_1 removed [ 535.701128][ T5468] team0 (unregistering): Port device team_slave_0 removed [ 536.167615][ T5236] Bluetooth: hci4: command tx timeout [ 536.646064][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 536.652379][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 536.679411][ T8] usb 1-1: USB disconnect, device number 81 [ 537.033369][T12697] chnl_net:caif_netlink_parms(): no params data found [ 537.206212][ T8] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 537.312272][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.340041][ T4877] usb 3-1: USB disconnect, device number 52 [ 537.351668][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.367416][ T8] usb 1-1: device descriptor read/64, error -71 [ 537.396623][T12697] bridge_slave_0: entered allmulticast mode [ 537.403723][T12697] bridge_slave_0: entered promiscuous mode [ 537.422612][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.432065][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.440249][T12697] bridge_slave_1: entered allmulticast mode [ 537.449288][T12697] bridge_slave_1: entered promiscuous mode [ 537.490407][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.530704][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.592599][T12697] team0: Port device team_slave_0 added [ 537.607013][ T8] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 537.623821][T12697] team0: Port device team_slave_1 added [ 537.686307][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.702658][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 537.713671][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.744591][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 537.756728][ T8] usb 1-1: device descriptor read/64, error -71 [ 537.773706][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.780660][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.794004][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.815148][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.840544][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.867413][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 537.875257][ T8] usb usb1-port1: attempt power cycle [ 537.882541][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.893820][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.002647][T12697] hsr_slave_0: entered promiscuous mode [ 538.020164][T12697] hsr_slave_1: entered promiscuous mode [ 538.217234][ T8] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 538.249523][ T5236] Bluetooth: hci4: command tx timeout [ 538.270243][ T8] usb 1-1: device descriptor read/8, error -71 [ 538.506960][ T8] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 538.549037][ T8] usb 1-1: device descriptor read/8, error -71 [ 538.602872][T12786] chnl_net:caif_netlink_parms(): no params data found [ 538.643956][T12804] xt_l2tp: missing protocol rule (udp|l2tpip) [ 538.667123][ T8] usb usb1-port1: unable to enumerate USB device [ 538.951677][T12786] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.959538][T12786] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.967455][T12786] bridge_slave_0: entered allmulticast mode [ 538.974578][T12786] bridge_slave_0: entered promiscuous mode [ 538.983682][T12786] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.991021][T12786] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.998408][T12786] bridge_slave_1: entered allmulticast mode [ 539.005598][T12786] bridge_slave_1: entered promiscuous mode [ 539.037970][T12786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.050535][T12786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.133164][T12786] team0: Port device team_slave_0 added [ 539.158024][T12786] team0: Port device team_slave_1 added [ 539.207264][T12786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.214280][T12786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.242312][T12786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.264001][T12786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.271393][T12786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.301045][T12786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.322296][T12697] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.361905][T12697] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.384250][T12786] hsr_slave_0: entered promiscuous mode [ 539.391331][T12786] hsr_slave_1: entered promiscuous mode [ 539.398667][T12786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.406294][T12786] Cannot create hsr debugfs directory [ 539.420281][T12697] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.434558][T12697] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.579545][T12817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 539.723477][T12786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.766489][T12821] ip6gretap1: entered promiscuous mode [ 539.776218][T12821] ip6gretap1: entered allmulticast mode [ 539.960941][T12786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.007029][ T5236] Bluetooth: hci6: command tx timeout [ 540.128478][T12786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.229354][T12786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.263167][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.314293][T12697] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.328421][ T5236] Bluetooth: hci4: command tx timeout [ 540.351938][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.359227][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.421657][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.428924][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.457351][ T4877] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 540.618343][ T4877] usb 1-1: Using ep0 maxpacket: 32 [ 540.626853][T12786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.635411][ T4877] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 540.665454][T12786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.684787][ T4877] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 540.703984][ T4877] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 540.717575][ T4877] usb 1-1: Product: syz [ 540.721955][ T4877] usb 1-1: Manufacturer: syz [ 540.735996][T12786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 540.745517][ T4877] usb 1-1: SerialNumber: syz [ 540.755154][T12786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 540.766286][ T4877] usb 1-1: config 0 descriptor?? [ 540.787069][T12827] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 540.878453][T12697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.010151][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.077073][T12786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.151816][T12786] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.164425][T12697] veth0_vlan: entered promiscuous mode [ 541.205408][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.212702][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.241655][T12850] @ÿ: renamed from veth0_vlan (while UP) [ 541.257101][T12697] veth1_vlan: entered promiscuous mode [ 541.266086][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.273442][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.356092][T12697] veth0_macvtap: entered promiscuous mode [ 541.380993][T12697] veth1_macvtap: entered promiscuous mode [ 541.429956][T12786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.450041][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.462201][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.473473][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.484581][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.494990][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.506151][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.519697][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.554581][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.573931][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.585908][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.605119][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.631511][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.652574][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.665838][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.685449][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.698903][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.710158][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.724299][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.743495][T12697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.756086][T12697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.766612][T12697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.775419][T12697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.800926][T12786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.969254][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.985089][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.024423][T12786] veth0_vlan: entered promiscuous mode [ 542.068938][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.086879][ T5236] Bluetooth: hci6: command tx timeout [ 542.102401][T12786] veth1_vlan: entered promiscuous mode [ 542.117335][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.188394][T12786] veth0_macvtap: entered promiscuous mode [ 542.251495][T12786] veth1_macvtap: entered promiscuous mode [ 542.307758][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.323720][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.336151][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.348035][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.361240][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.372457][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.384893][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.404658][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.429547][T12786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.446844][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 542.468213][T12876] netlink: 'syz.1.1383': attribute type 15 has an invalid length. [ 542.484803][T12876] netlink: 'syz.1.1383': attribute type 18 has an invalid length. [ 542.525137][T12876] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 3072 - 0 [ 542.534739][T12876] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 3072 - 0 [ 542.544237][T12876] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 3072 - 0 [ 542.553056][T12876] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 3072 - 0 [ 542.571927][T12876] vxlan0: entered promiscuous mode [ 542.615528][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.647455][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.659087][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.669773][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.686462][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.700981][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.711282][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.724153][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.734908][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.747335][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.762330][T12786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.773306][T12786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.789044][T12786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.816146][T12786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.836644][T12786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.846181][T12786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.866991][T12786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.074687][ T5468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.093506][ T5468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.177155][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.193167][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.400756][T12904] program syz.2.1395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.456421][T12904] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1395'. [ 543.519171][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 543.731461][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.922599][T12918] libceph: resolve '0' (ret=-3): failed [ 543.927859][T12919] ip6gretap1: entered promiscuous mode [ 543.934365][T12919] ip6gretap1: entered allmulticast mode [ 544.167850][ T5236] Bluetooth: hci6: command tx timeout [ 544.186272][T12923] fuse: Unknown parameter '' [ 544.269573][T12927] input: syz0 as /devices/virtual/input/input40 [ 544.549784][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.687333][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 544.725858][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 544.739368][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 544.758936][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 544.770558][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.781297][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 544.792310][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.059008][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.366270][ T29] audit: type=1326 audit(1728664496.285:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12957 comm="syz.1.1419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b8b97dff9 code=0x0 [ 545.449119][ T1102] bridge_slave_1: left allmulticast mode [ 545.449395][ T1102] bridge_slave_1: left promiscuous mode [ 545.449859][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.513438][ T1102] bridge_slave_0: left allmulticast mode [ 545.513473][ T1102] bridge_slave_0: left promiscuous mode [ 545.513700][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.808512][T12975] program syz.1.1422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.849520][T12975] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1422'. [ 545.974062][T12982] netlink: 'syz.1.1425': attribute type 9 has an invalid length. [ 545.990254][T12982] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1425'. [ 546.027878][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 546.218522][T12986] xt_l2tp: missing protocol rule (udp|l2tpip) [ 546.265714][ T5232] Bluetooth: hci6: command tx timeout [ 546.398189][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.419823][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.433784][ T1102] bond0 (unregistering): Released all slaves [ 546.586496][T12991] input: syz0 as /devices/virtual/input/input41 [ 546.697207][T12953] chnl_net:caif_netlink_parms(): no params data found [ 546.898949][ T5232] Bluetooth: hci5: command tx timeout [ 546.949973][ T1102] hsr_slave_0: left promiscuous mode [ 546.959598][ T1102] hsr_slave_1: left promiscuous mode [ 547.007765][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.024834][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.041459][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.054543][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.103967][ T1102] veth1_macvtap: left promiscuous mode [ 547.147666][ T1102] veth0_macvtap: left promiscuous mode [ 547.153402][ T1102] veth1_vlan: left promiscuous mode [ 547.162155][ T1102] veth0_vlan: left promiscuous mode [ 548.286853][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 548.355291][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 548.976758][ T5232] Bluetooth: hci5: command tx timeout [ 549.646072][T13003] ip6gretap1: entered promiscuous mode [ 549.652608][T13003] ip6gretap1: entered allmulticast mode [ 549.876017][T12953] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.912380][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.935991][T12953] bridge_slave_0: entered allmulticast mode [ 549.953897][T12953] bridge_slave_0: entered promiscuous mode [ 549.984789][T12953] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.996847][ T5283] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 550.027673][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.035073][T12953] bridge_slave_1: entered allmulticast mode [ 550.046038][T12953] bridge_slave_1: entered promiscuous mode [ 550.160471][ T5283] usb 3-1: Using ep0 maxpacket: 8 [ 550.179884][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.194042][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.219483][T12953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.242888][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 550.275490][ T5283] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 550.288054][T12953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.319974][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.340868][ T5283] usb 3-1: config 0 descriptor?? [ 550.500225][T12953] team0: Port device team_slave_0 added [ 550.532615][T12953] team0: Port device team_slave_1 added [ 550.638699][T12953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.656645][T12953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.744129][T12953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.800310][ T5283] uclogic 0003:5543:0064.0021: item fetching failed at offset 5/7 [ 550.817380][T12953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.824454][T12953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.877238][ T5283] uclogic 0003:5543:0064.0021: parse failed [ 550.883295][ T5283] uclogic 0003:5543:0064.0021: probe with driver uclogic failed with error -22 [ 550.884579][T12953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.047026][ T5232] Bluetooth: hci5: command tx timeout [ 551.074316][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 551.087019][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.095794][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.104642][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.112608][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 551.137593][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 551.170457][ T1102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.198929][ T5283] usb 3-1: USB disconnect, device number 53 [ 551.265277][T12953] hsr_slave_0: entered promiscuous mode [ 551.280601][T12953] hsr_slave_1: entered promiscuous mode [ 551.287892][T12953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.295659][T12953] Cannot create hsr debugfs directory [ 551.338091][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.386840][ T1102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.505739][ T1102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.518299][T13043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1439'. [ 551.639225][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.818607][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.857059][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.155611][ T1102] bridge_slave_1: left allmulticast mode [ 552.167266][ T1102] bridge_slave_1: left promiscuous mode [ 552.173073][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.199574][ T1102] bridge_slave_0: left allmulticast mode [ 552.205538][ T1102] bridge_slave_0: left promiscuous mode [ 552.215880][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.316900][ T5285] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 552.497655][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.516749][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 552.536105][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 552.554713][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.579981][ T5285] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.593889][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.608522][ T5285] usb 3-1: config 0 descriptor?? [ 552.696957][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.726472][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.877627][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.895655][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.914258][ T1102] bond0 (unregistering): Released all slaves [ 552.950620][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'. [ 552.973494][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1443'. [ 553.039874][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.047681][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.056458][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.064676][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.079334][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.090194][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.098148][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.105749][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.113376][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.122764][ T5285] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 553.131061][ T5285] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 553.139321][ T5236] Bluetooth: hci5: command tx timeout [ 553.217047][ T5236] Bluetooth: hci3: command tx timeout [ 553.361264][T13040] chnl_net:caif_netlink_parms(): no params data found [ 553.489064][ T1102] hsr_slave_0: left promiscuous mode [ 553.506021][ T1102] hsr_slave_1: left promiscuous mode [ 553.514138][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.536739][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.545230][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.553159][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.585230][ T1102] veth1_macvtap: left promiscuous mode [ 553.591190][ T1102] veth0_macvtap: left promiscuous mode [ 553.599279][ T1102] veth1_vlan: left promiscuous mode [ 553.604752][ T1102] @ÿ: left promiscuous mode [ 554.545473][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 554.607412][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 555.294068][ T5236] Bluetooth: hci3: command tx timeout [ 555.364677][T13040] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.388883][T13040] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.409009][T13040] bridge_slave_0: entered allmulticast mode [ 555.427222][T13040] bridge_slave_0: entered promiscuous mode [ 555.449854][T13040] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.459777][T13040] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.470219][T13040] bridge_slave_1: entered allmulticast mode [ 555.470329][T13107] xt_cgroup: invalid path, errno=-2 [ 555.478940][T13040] bridge_slave_1: entered promiscuous mode [ 555.657590][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.694665][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.736998][T12953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 555.868889][T13118] input: syz0 as /devices/virtual/input/input42 [ 555.910757][T12953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 555.943349][T12953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 556.035151][T13040] team0: Port device team_slave_0 added [ 556.054517][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 556.134742][T12953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.189875][T13040] team0: Port device team_slave_1 added [ 556.293836][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.310394][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.339000][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.390647][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.408842][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.437094][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.518369][T13040] hsr_slave_0: entered promiscuous mode [ 556.525188][T13040] hsr_slave_1: entered promiscuous mode [ 556.532124][T13040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.540444][T13040] Cannot create hsr debugfs directory [ 556.609233][T12953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.685584][T12953] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.717668][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.724860][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.736229][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.743459][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.802913][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.815923][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.827585][T12953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.839131][T12953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.099694][T12953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.120500][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 557.275711][T13148] delete_channel: no stack [ 557.367262][ T5236] Bluetooth: hci3: command tx timeout [ 557.378812][T12953] veth0_vlan: entered promiscuous mode [ 557.482561][T12953] veth1_vlan: entered promiscuous mode [ 557.693692][T13156] delete_channel: no stack [ 557.728328][T13040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 557.759282][T12953] veth0_macvtap: entered promiscuous mode [ 557.774002][T13040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 557.796329][T13040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 557.817608][T12953] veth1_macvtap: entered promiscuous mode [ 557.848287][T13040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 557.959321][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.982495][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.995778][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.014021][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.059431][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.109893][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.198277][T12953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.266133][T13168] xt_cgroup: invalid path, errno=-2 [ 558.320649][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.368185][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.417844][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.440246][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.475348][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.511311][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.530731][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.565032][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.588650][T12953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.610043][T12953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.635264][T12953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.697975][T12953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.719530][T12953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.736656][T12953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.745439][T12953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.971749][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.009613][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.045336][T13040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.180871][T13040] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.184965][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 559.224003][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.231249][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.282940][T13203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.313539][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.320760][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.332616][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.367408][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.447977][ T5236] Bluetooth: hci3: command tx timeout [ 559.478782][T13206] ip6gretap1: entered promiscuous mode [ 559.484330][T13206] ip6gretap1: entered allmulticast mode [ 559.770016][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 559.778846][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.791134][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 559.803972][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 559.820733][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 559.831622][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 559.842219][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 560.023778][T13040] veth0_vlan: entered promiscuous mode [ 560.076798][T13040] veth1_vlan: entered promiscuous mode [ 560.117874][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.127283][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.203227][T13040] veth0_macvtap: entered promiscuous mode [ 560.213676][T13040] veth1_macvtap: entered promiscuous mode [ 560.314171][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.326132][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.336725][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.347635][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.361076][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.373485][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.385500][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.397947][T13222] chnl_net:caif_netlink_parms(): no params data found [ 560.434102][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.445155][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.462519][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.476982][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.487304][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.498744][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.524909][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.551859][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.592366][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.606589][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.616492][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.635194][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.647398][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.661583][T13040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.678232][T13040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.698793][T13040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.716684][T13040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.803199][T13244] batadv_slave_1: entered promiscuous mode [ 561.031953][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.057145][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.064470][T13222] bridge_slave_0: entered allmulticast mode [ 561.087941][T13222] bridge_slave_0: entered promiscuous mode [ 561.131634][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.156703][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.174490][T13222] bridge_slave_1: entered allmulticast mode [ 561.186827][T13222] bridge_slave_1: entered promiscuous mode [ 561.255304][T13222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.285797][T13222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.334895][ T5468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.374704][ T5468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.412632][T13222] team0: Port device team_slave_0 added [ 561.499467][T13222] team0: Port device team_slave_1 added [ 561.618539][T13222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.636689][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.674018][T13222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.732358][T13222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.755010][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.798766][T13222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.820860][T13242] batadv_slave_1: left promiscuous mode [ 561.831408][ T5468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.865696][ T5468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.936677][ T5232] Bluetooth: hci7: command tx timeout [ 561.988807][T13222] hsr_slave_0: entered promiscuous mode [ 562.009156][T13222] hsr_slave_1: entered promiscuous mode [ 562.015579][T13222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.023956][T13222] Cannot create hsr debugfs directory [ 562.404026][T13284] input: syz0 as /devices/virtual/input/input43 [ 562.519596][T13222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.726349][T13222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.779545][T13291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.882943][T13222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.985645][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 562.998354][T13222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.364717][T13222] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.376111][T13222] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.409775][T13299] ip6gretap1: entered promiscuous mode [ 563.415347][T13299] ip6gretap1: entered allmulticast mode [ 563.471980][T13222] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.533739][T13222] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.733536][T13222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.767618][T13222] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.780547][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.787779][ T3968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.808535][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.815721][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.903375][T13222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.960040][T13222] veth0_vlan: entered promiscuous mode [ 564.003574][T13306] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1479'. [ 564.005855][T13222] veth1_vlan: entered promiscuous mode [ 564.013809][ T5232] Bluetooth: hci7: command tx timeout [ 564.043116][T13307] team0: Device ipvlan1 failed to register rx_handler [ 564.111595][T13222] veth0_macvtap: entered promiscuous mode [ 564.123125][T13222] veth1_macvtap: entered promiscuous mode [ 564.143943][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.155320][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.181359][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.212662][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.241664][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.268718][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1480'. [ 564.269121][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.286939][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.294535][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.318719][T13222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.320717][T13311] input: syz0 as /devices/virtual/input/input44 [ 564.358574][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.390991][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.416455][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.428137][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.438743][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.451595][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.461875][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.473287][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.474013][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 564.483472][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.509491][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.534108][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.545904][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.557802][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.569774][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.609545][T13222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.671170][T13222] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.701738][T13222] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.716248][T13222] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.727861][T13222] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.898554][ T3968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.923413][ T3968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.005773][ T3968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.024372][ T3968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.085919][T13323] xt_l2tp: missing protocol rule (udp|l2tpip) [ 566.087880][ T5232] Bluetooth: hci7: command tx timeout [ 567.068378][T13352] input: syz0 as /devices/virtual/input/input45 [ 567.232104][T13357] netlink: 'syz.3.1497': attribute type 5 has an invalid length. [ 567.377595][ T29] audit: type=1326 audit(1728664518.295:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.4.1498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8a8d7dff9 code=0x0 [ 567.427831][ T29] audit: type=1326 audit(1728664518.295:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.4.1498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8a8d7dff9 code=0x0 [ 567.610566][T13365] xt_l2tp: missing protocol rule (udp|l2tpip) [ 567.833684][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1501'. [ 568.167751][ T5232] Bluetooth: hci7: command tx timeout [ 569.199383][T13391] program syz.2.1509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.231162][T13391] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1509'. [ 569.475690][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.669268][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.724973][T13395] input: syz0 as /devices/virtual/input/input46 [ 569.793447][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.857372][T13396] netlink: 'syz.2.1513': attribute type 5 has an invalid length. [ 569.867349][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.889476][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.899223][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.913682][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.921918][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 569.931107][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.140090][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.227416][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 570.987593][ T11] bridge_slave_1: left allmulticast mode [ 570.993339][ T11] bridge_slave_1: left promiscuous mode [ 571.036859][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.067539][ T11] bridge_slave_0: left allmulticast mode [ 571.098518][ T11] bridge_slave_0: left promiscuous mode [ 571.135934][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.261249][T13426] xt_l2tp: missing protocol rule (udp|l2tpip) [ 571.461407][T13432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1516'. [ 572.020010][ T5236] Bluetooth: hci5: command tx timeout [ 572.113666][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.126767][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.145043][ T11] bond0 (unregistering): Released all slaves [ 572.219476][T13438] ip6gretap1: entered promiscuous mode [ 572.246668][T13438] ip6gretap1: entered allmulticast mode [ 572.468152][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.556348][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.627500][T13399] chnl_net:caif_netlink_parms(): no params data found [ 573.014597][ T11] hsr_slave_0: left promiscuous mode [ 573.033794][ T11] hsr_slave_1: left promiscuous mode [ 573.048058][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.158742][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.205011][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.359351][ T11] veth1_macvtap: left promiscuous mode [ 573.365110][ T11] veth0_macvtap: left promiscuous mode [ 573.371194][ T11] veth1_vlan: left promiscuous mode [ 573.377806][ T11] veth0_vlan: left promiscuous mode [ 573.421642][T13459] input: syz0 as /devices/virtual/input/input47 [ 573.629308][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.674740][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.086687][ T5236] Bluetooth: hci5: command tx timeout [ 574.458399][T13487] xt_l2tp: missing protocol rule (udp|l2tpip) [ 576.141105][ T11] team0 (unregistering): Port device team_slave_1 removed [ 576.166943][ T5236] Bluetooth: hci5: command tx timeout [ 576.356821][ T11] team0 (unregistering): Port device team_slave_0 removed [ 577.834429][T13506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1539'. [ 578.051124][T13492] ip6gretap1: entered promiscuous mode [ 578.058522][T13492] ip6gretap1: entered allmulticast mode [ 578.216650][T13399] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.245311][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.252761][ T5236] Bluetooth: hci5: command tx timeout [ 578.297242][T13399] bridge_slave_0: entered allmulticast mode [ 578.338225][T13399] bridge_slave_0: entered promiscuous mode [ 578.349070][T13399] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.356718][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.364308][T13399] bridge_slave_1: entered allmulticast mode [ 578.372597][T13399] bridge_slave_1: entered promiscuous mode [ 578.499594][T13399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.518866][T13522] FAULT_INJECTION: forcing a failure. [ 578.518866][T13522] name failslab, interval 1, probability 0, space 0, times 0 [ 578.535644][T13399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.546220][T13522] CPU: 1 UID: 0 PID: 13522 Comm: syz.1.1542 Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 578.557044][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 578.567123][T13522] Call Trace: [ 578.570416][T13522] [ 578.573363][T13522] dump_stack_lvl+0x241/0x360 [ 578.578098][T13522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.583320][T13522] ? __pfx__printk+0x10/0x10 [ 578.587959][T13522] ? ref_tracker_alloc+0x332/0x490 [ 578.593100][T13522] should_fail_ex+0x3b0/0x4e0 [ 578.597811][T13522] ? skb_clone+0x20c/0x390 [ 578.602270][T13522] should_failslab+0xac/0x100 [ 578.606990][T13522] ? skb_clone+0x20c/0x390 [ 578.611458][T13522] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 578.616986][T13522] skb_clone+0x20c/0x390 [ 578.621253][T13522] __netlink_deliver_tap+0x3cc/0x7c0 [ 578.626564][T13522] ? netlink_deliver_tap+0x2e/0x1b0 [ 578.631783][T13522] netlink_deliver_tap+0x19d/0x1b0 [ 578.636910][T13522] netlink_unicast+0x7c4/0x990 [ 578.641702][T13522] ? __pfx_netlink_unicast+0x10/0x10 [ 578.647010][T13522] ? __virt_addr_valid+0x183/0x530 [ 578.652141][T13522] ? __check_object_size+0x48e/0x900 [ 578.657445][T13522] netlink_sendmsg+0x8e4/0xcb0 [ 578.662232][T13522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.667535][T13522] ? aa_sock_msg_perm+0x91/0x160 [ 578.672495][T13522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.677793][T13522] __sock_sendmsg+0x221/0x270 [ 578.682515][T13522] ____sys_sendmsg+0x52a/0x7e0 [ 578.687413][T13522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.692730][T13522] __sys_sendmsg+0x292/0x380 [ 578.697337][T13522] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.702473][T13522] ? __pfx_vfs_write+0x10/0x10 [ 578.707268][T13522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 578.713618][T13522] ? do_syscall_64+0x100/0x230 [ 578.718396][T13522] ? do_syscall_64+0xb6/0x230 [ 578.723124][T13522] do_syscall_64+0xf3/0x230 [ 578.727640][T13522] ? clear_bhb_loop+0x35/0x90 [ 578.732386][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.738322][T13522] RIP: 0033:0x7f2b8b97dff9 [ 578.742772][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.762409][T13522] RSP: 002b:00007f2b8b3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.770845][T13522] RAX: ffffffffffffffda RBX: 00007f2b8bb35f80 RCX: 00007f2b8b97dff9 [ 578.778844][T13522] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 578.786863][T13522] RBP: 00007f2b8b3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 578.794859][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.802958][T13522] R13: 0000000000000000 R14: 00007f2b8bb35f80 R15: 00007f2b8bc5fa28 [ 578.811007][T13522] [ 579.005736][T13399] team0: Port device team_slave_0 added [ 579.076648][T13399] team0: Port device team_slave_1 added [ 579.402630][T13569] xt_cgroup: invalid path, errno=-2 [ 579.421087][T13399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.464197][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.475464][T13572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.523931][T13399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.561858][T13572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.664328][T13572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 579.789337][T13399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.796354][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.924157][T13399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.148652][T13399] hsr_slave_0: entered promiscuous mode [ 580.272287][T13399] hsr_slave_1: entered promiscuous mode [ 580.466775][T13399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.474840][T13399] Cannot create hsr debugfs directory [ 581.074333][T13608] netlink: 'syz.1.1553': attribute type 5 has an invalid length. [ 581.532593][T13614] input: syz0 as /devices/virtual/input/input48 [ 582.273721][T13399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.327581][T13399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 582.386790][T13399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 582.409711][T13399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 582.683020][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.712419][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.792432][T13399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.846014][T13399] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.860501][T13555] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.867719][T13555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.910555][T13399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.922443][T13399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.940531][T13555] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.947907][T13555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.005402][T13399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.052638][T13399] veth0_vlan: entered promiscuous mode [ 583.072396][T13399] veth1_vlan: entered promiscuous mode [ 583.136178][T13399] veth0_macvtap: entered promiscuous mode [ 583.152046][T13399] veth1_macvtap: entered promiscuous mode [ 583.189564][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.201457][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.212073][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.233381][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.248357][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.263204][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.275576][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.297172][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.311358][T13399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.323277][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.344812][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.375488][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.417608][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.436605][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.457141][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.472535][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.498681][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.509440][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.523916][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.534572][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.545989][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.556844][T13399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.567953][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.581764][T13399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.605514][T13399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.633024][T13399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.642868][T13399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.652153][T13399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.814134][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.832893][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.865870][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.875386][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.106115][T13675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.159071][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.678050][T13704] dccp_invalid_packet: P.Data Offset(0) too small [ 585.179588][T13716] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 587.278933][T13738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.614656][T13747] netlink: 'syz.4.1576': attribute type 5 has an invalid length. [ 587.761636][T13756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1578'. [ 588.186807][T13768] input: syz0 as /devices/virtual/input/input49 [ 588.436986][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 591.930348][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 592.740497][T13809] netlink: 'syz.4.1592': attribute type 3 has an invalid length. [ 592.748687][T13809] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 592.756459][T13809] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1592'. [ 592.770790][T13809] usb usb8: usbfs: process 13809 (syz.4.1592) did not claim interface 0 before use [ 592.783138][T13809] binder: 13808:13809 ioctl c0306201 20000180 returned -22 [ 592.871551][T13812] input: syz0 as /devices/virtual/input/input50 [ 593.190353][T13819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1596'. [ 593.331050][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 593.428181][T13826] program syz.4.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.442914][T13826] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1599'. [ 593.650628][T13832] binder: 13828:13832 ioctl c0306201 20000480 returned -22 [ 594.130352][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 594.142691][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 594.154303][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 594.155356][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 594.156985][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 594.157344][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 594.162198][T13842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.162223][T13842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.162255][T13842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.162273][T13842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.165904][T13842] batadv_slave_0: entered promiscuous mode [ 594.487760][T13843] chnl_net:caif_netlink_parms(): no params data found [ 594.563352][T13852] input: syz0 as /devices/virtual/input/input51 [ 594.867302][T13843] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.874827][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.893798][T13843] bridge_slave_0: entered allmulticast mode [ 594.911694][T13843] bridge_slave_0: entered promiscuous mode [ 594.931392][T13843] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.953958][T13843] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.004244][T13843] bridge_slave_1: entered allmulticast mode [ 595.029693][T13843] bridge_slave_1: entered promiscuous mode [ 595.360054][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.409291][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.654171][T13843] team0: Port device team_slave_0 added [ 595.705842][T13843] team0: Port device team_slave_1 added [ 595.990662][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.055846][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.257858][ T5232] Bluetooth: hci8: command tx timeout [ 596.266067][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.279456][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.286629][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.314197][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.471083][T13843] hsr_slave_0: entered promiscuous mode [ 596.489656][T13843] hsr_slave_1: entered promiscuous mode [ 596.512260][T13843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.536888][T13843] Cannot create hsr debugfs directory [ 597.057024][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 597.088922][T13843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 3072 - 0 [ 597.100436][T13843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.145300][T13887] program syz.4.1620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.161027][T13887] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1620'. [ 597.240587][T13843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 3072 - 0 [ 597.253727][T13843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.339115][T13890] input: syz0 as /devices/virtual/input/input52 [ 597.444082][T13843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 3072 - 0 [ 597.467732][T13843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.642438][T13843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 3072 - 0 [ 597.654127][T13843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.656840][T13897] netlink: 'syz.4.1624': attribute type 5 has an invalid length. [ 598.031410][T13843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 598.081901][T13843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 598.172535][T13843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 598.218435][T13843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 598.336622][ T5236] Bluetooth: hci8: command tx timeout [ 598.618630][T13843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.755742][T13843] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.796226][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.803589][T12624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.848175][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.855472][T12624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.214258][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.222139][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1629'. [ 599.291062][T13843] veth0_vlan: entered promiscuous mode [ 599.308886][T13920] program syz.3.1630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.319485][T13843] veth1_vlan: entered promiscuous mode [ 599.321183][T13920] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1630'. [ 599.447649][ T30] INFO: task syz.1.1182:11400 blocked for more than 143 seconds. [ 599.456087][ T30] Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 599.494992][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.510655][ T30] task:syz.1.1182 state:D stack:22928 pid:11400 tgid:11399 ppid:10622 flags:0x00004006 [ 599.547539][T13843] veth0_macvtap: entered promiscuous mode [ 599.551278][ T30] Call Trace: [ 599.562121][ T30] [ 599.565237][ T30] __schedule+0x1895/0x4b30 [ 599.582474][ T30] ? __pfx___schedule+0x10/0x10 [ 599.634387][T13843] veth1_macvtap: entered promiscuous mode [ 599.657873][ T30] ? __pfx_lock_release+0x10/0x10 [ 599.657933][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.657976][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 599.658013][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 599.658058][ T30] ? schedule+0x90/0x320 [ 599.658093][ T30] schedule+0x14b/0x320 [ 599.658133][ T30] rpm_resume+0x504/0x1670 [ 599.658180][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 599.658224][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 599.658260][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 599.658300][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.658334][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 599.658376][ T30] rpm_resume+0x8fe/0x1670 [ 599.658427][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 599.658464][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 599.658500][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 599.658542][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.658585][ T30] __pm_runtime_resume+0x120/0x180 [ 599.658619][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 599.658662][ T30] usb_autopm_get_interface+0x22/0xf0 [ 599.658692][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 599.658732][ T30] wdm_manage_power+0x1c/0xa0 [ 599.658776][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 599.658815][ T30] wdm_release+0x20f/0x460 [ 599.658853][ T30] ? __pfx_wdm_release+0x10/0x10 [ 599.664578][ T30] __fput+0x23f/0x880 [ 599.664649][ T30] task_work_run+0x24f/0x310 [ 599.664688][ T30] ? __pfx_task_work_run+0x10/0x10 [ 599.664723][ T30] ? switch_task_namespaces+0xe4/0x110 [ 599.664769][ T30] do_exit+0xa2f/0x28e0 [ 599.664807][ T30] ? __pfx_do_exit+0x10/0x10 [ 599.664834][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.664872][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.664915][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 599.664952][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 599.664994][ T30] do_group_exit+0x207/0x2c0 [ 599.665020][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.665055][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 599.665097][ T30] get_signal+0x16a3/0x1740 [ 599.665145][ T30] ? __pfx_get_signal+0x10/0x10 [ 599.665187][ T30] arch_do_signal_or_restart+0x96/0x860 [ 599.665228][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 599.665262][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.665313][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 599.665356][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 599.665399][ T30] do_syscall_64+0x100/0x230 [ 599.665425][ T30] ? clear_bhb_loop+0x35/0x90 [ 599.665455][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.665494][ T30] RIP: 0033:0x7f1e5d97dff9 [ 599.665517][ T30] RSP: 002b:00007f1e5e6c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 599.665549][ T30] RAX: fffffffffffffe00 RBX: 00007f1e5db35f88 RCX: 00007f1e5d97dff9 [ 599.665570][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e5db35f88 [ 599.665589][ T30] RBP: 00007f1e5db35f80 R08: 0000000000000000 R09: 0000000000000000 [ 599.679507][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e5db35f8c [ 599.679538][ T30] R13: 0000000000000000 R14: 00007f1e5dc5f940 R15: 00007f1e5dc5fa28 [ 599.679576][ T30] [ 599.679725][ T30] [ 599.679725][ T30] Showing all locks held in the system: [ 599.679741][ T30] 7 locks held by kworker/0:1/9: [ 599.679769][ T30] #0: ffff888021abe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.679862][ T30] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.679943][ T30] #2: ffff888145b01190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 599.683641][ T30] #3: ffff88805e95b190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.683730][ T30] #4: ffff88806a31b160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.683825][ T30] #5: ffff88806503da20 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.683893][ T30] #6: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 599.683981][ T30] 1 lock held by khungtaskd/30: [ 599.683997][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 599.684087][ T30] 3 locks held by kworker/0:2/1176: [ 599.684129][ T30] 6 locks held by kworker/1:3/4877: [ 599.684145][ T30] #0: ffff888021abe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.684224][ T30] #1: ffffc90002f5fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.684303][ T30] #2: ffff888144f37190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 599.684380][ T30] #3: ffff888079cc2190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.684448][ T30] #4: ffff888052980160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.691442][ T30] #5: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 599.691545][ T30] 2 locks held by getty/4987: [ 599.691563][ T30] #0: ffff88802e1e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 599.691639][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 599.691722][ T30] 3 locks held by kworker/0:4/5282: [ 599.691739][ T30] #0: ffff888140451948 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.691826][ T30] #1: ffffc90003f07d00 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.691906][ T30] #2: ffff888027f2d510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x1c6/0x14d0 [ 599.691983][ T30] 7 locks held by kworker/1:6/5285: [ 599.691999][ T30] #0: ffff888021abe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.692077][ T30] #1: ffffc90003f67d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.692156][ T30] #2: ffff888027e66190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 599.701185][ T30] #3: ffff88802f01d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.701273][ T30] #4: ffff88803100e160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.701342][ T30] #5: ffff8880692c9a20 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.701957][ T30] #6: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 599.702044][ T30] 7 locks held by kworker/1:7/5323: [ 599.702061][ T30] #0: ffff888021abe948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.702142][ T30] #1: ffffc9000448fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.702222][ T30] #2: ffff8881457f6190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 599.702297][ T30] #3: ffff888024c9d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.702365][ T30] #4: ffff88807ad14160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.702433][ T30] #5: ffff88805d799a20 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.702501][ T30] #6: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 599.702603][ T30] 1 lock held by syz.1.1182/11400: [ 599.702620][ T30] #0: ffffffff8f633a88 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4f/0x460 [ 599.705881][ T30] 2 locks held by syz.0.1294/12270: [ 599.705900][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 599.706662][ T30] #1: ffffffff8f633a88 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 599.707561][ T30] 4 locks held by udevd/12291: [ 599.707581][ T30] #0: ffff88802d339540 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 599.709576][ T30] #1: ffff88807ed63888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 599.709664][ T30] #2: ffff8880748ae4b8 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 599.709747][ T30] #3: ffff888079cc2190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 599.709832][ T30] 3 locks held by kworker/u8:9/12624: [ 599.709850][ T30] #0: ffff88814be0a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.709929][ T30] #1: ffffc90003befd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.710009][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 599.710089][ T30] 1 lock held by syz.2.1366/12629: [ 599.710106][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 599.710190][ T30] 1 lock held by syz.3.1433/13013: [ 599.710207][ T30] #0: ffff888144f37190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 599.710281][ T30] 3 locks held by kworker/0:0H/13409: [ 599.710300][ T30] 2 locks held by kworker/u8:21/13565: [ 599.710319][ T30] 1 lock held by syz.1.1560/13660: [ 599.710335][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 599.710414][ T30] 1 lock held by syz-executor/13843: [ 599.710432][ T30] 1 lock held by syz.3.1633/13928: [ 599.710449][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 599.719135][ T30] 2 locks held by syz.4.1634/13929: [ 599.719154][ T30] 1 lock held by syz.2.1632/13926: [ 599.719171][ T30] #0: ffff88807b083118 (&mm->mmap_lock){++++}-{3:3}, at: do_mprotect_pkey+0x21b/0xd80 [ 599.719251][ T30] 1 lock held by syz.2.1632/13927: [ 599.719376][ T30] [ 599.719386][ T30] ============================================= [ 599.719386][ T30] [ 599.719399][ T30] NMI backtrace for cpu 1 [ 599.719414][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 599.719442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.719463][ T30] Call Trace: [ 599.719473][ T30] [ 599.719485][ T30] dump_stack_lvl+0x241/0x360 [ 599.719517][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.719543][ T30] ? __pfx__printk+0x10/0x10 [ 599.719591][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 599.719628][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 599.719657][ T30] ? _printk+0xd5/0x120 [ 599.719691][ T30] ? __pfx__printk+0x10/0x10 [ 599.719726][ T30] ? __wake_up_klogd+0xcc/0x110 [ 599.719766][ T30] ? __pfx__printk+0x10/0x10 [ 599.719803][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 599.719840][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 599.719876][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 599.719911][ T30] watchdog+0xff4/0x1040 [ 599.719946][ T30] ? watchdog+0x1ea/0x1040 [ 599.719986][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.720018][ T30] kthread+0x2f0/0x390 [ 599.720043][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.720083][ T30] ? __pfx_kthread+0x10/0x10 [ 599.720109][ T30] ret_from_fork+0x4b/0x80 [ 599.720145][ T30] ? __pfx_kthread+0x10/0x10 [ 599.720170][ T30] ret_from_fork_asm+0x1a/0x30 [ 599.720219][ T30] [ 599.720267][ T30] Sending NMI from CPU 1 to CPUs 0: [ 599.720403][ C0] NMI backtrace for cpu 0 [ 599.720416][ C0] CPU: 0 UID: 0 PID: 13409 Comm: kworker/0:0H Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 599.720439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.720452][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 599.720491][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x0/0x120 [ 599.720519][ C0] Code: 11 18 4c 89 44 11 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 54 53 4c 8b 16 48 8b 46 08 48 83 c0 f8 [ 599.720536][ C0] RSP: 0018:ffffc90003e27a78 EFLAGS: 00000246 [ 599.720553][ C0] RAX: 0000000000000000 RBX: ffff88814b5f2c28 RCX: ffff888025458000 [ 599.720568][ C0] RDX: 0000000000000000 RSI: ffffffff8fc20b20 RDI: 0000000000000000 [ 599.720581][ C0] RBP: 0000000000000000 R08: ffffffff89567d4e R09: 1ffffffff2858f21 [ 599.720595][ C0] R10: dffffc0000000000 R11: fffffbfff2858f22 R12: 0000000000000000 [ 599.720609][ C0] R13: 0000000000000018 R14: dffffc0000000000 R15: 0000000000000000 [ 599.720623][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 599.720639][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.720653][ C0] CR2: 0000000000000000 CR3: 000000004772e000 CR4: 00000000003526f0 [ 599.720669][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 599.720681][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 599.720693][ C0] Call Trace: [ 599.720701][ C0] [ 599.720709][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 599.720731][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 599.720763][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 599.720785][ C0] ? nmi_handle+0x2a/0x5a0 [ 599.720813][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 599.720838][ C0] ? nmi_handle+0x14f/0x5a0 [ 599.720860][ C0] ? nmi_handle+0x2a/0x5a0 [ 599.720881][ C0] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 599.720907][ C0] ? default_do_nmi+0x63/0x160 [ 599.720930][ C0] ? exc_nmi+0x123/0x1f0 [ 599.720952][ C0] ? end_repeat_nmi+0xf/0x53 [ 599.720974][ C0] ? snd_vmidi_output_work+0x25e/0x470 [ 599.721105][ C0] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 599.721142][ C0] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 599.721170][ C0] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 599.721196][ C0] [ 599.721203][ C0] [ 599.721211][ C0] snd_seq_kernel_client_dispatch+0x99/0x300 [ 599.721243][ C0] snd_vmidi_output_work+0x28e/0x470 [ 599.721276][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 599.721309][ C0] ? process_scheduled_works+0x976/0x1850 [ 599.721336][ C0] process_scheduled_works+0xa63/0x1850 [ 599.721376][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.721407][ C0] ? assign_work+0x364/0x3d0 [ 599.721434][ C0] worker_thread+0x870/0xd30 [ 599.721464][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 599.721494][ C0] ? __kthread_parkme+0x169/0x1d0 [ 599.721523][ C0] ? __pfx_worker_thread+0x10/0x10 [ 599.721549][ C0] kthread+0x2f0/0x390 [ 599.721567][ C0] ? __pfx_worker_thread+0x10/0x10 [ 599.721595][ C0] ? __pfx_kthread+0x10/0x10 [ 599.721613][ C0] ret_from_fork+0x4b/0x80 [ 599.721640][ C0] ? __pfx_kthread+0x10/0x10 [ 599.721658][ C0] ret_from_fork_asm+0x1a/0x30 [ 599.721693][ C0] [ 599.743624][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 599.743649][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00205-g1d227fcc7222 #0 [ 599.743678][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.743694][ T30] Call Trace: [ 599.743704][ T30] [ 599.743715][ T30] dump_stack_lvl+0x241/0x360 [ 599.743759][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.743785][ T30] ? __pfx__printk+0x10/0x10 [ 599.743819][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.743864][ T30] ? vscnprintf+0x5d/0x90 [ 599.743894][ T30] panic+0x349/0x880 [ 599.743931][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 599.743963][ T30] ? __pfx_panic+0x10/0x10 [ 599.743996][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 599.744025][ T30] ? __irq_work_queue_local+0x137/0x410 [ 599.744061][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 599.744087][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 599.744117][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 599.744150][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 599.744183][ T30] watchdog+0x1033/0x1040 [ 599.744218][ T30] ? watchdog+0x1ea/0x1040 [ 599.744255][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.744288][ T30] kthread+0x2f0/0x390 [ 599.744313][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.744344][ T30] ? __pfx_kthread+0x10/0x10 [ 599.744369][ T30] ret_from_fork+0x4b/0x80 [ 599.744403][ T30] ? __pfx_kthread+0x10/0x10 [ 599.744428][ T30] ret_from_fork_asm+0x1a/0x30 [ 599.744475][ T30] [ 599.744936][ T30] Kernel Offset: disabled