last executing test programs: 3.171129182s ago: executing program 1 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x1c, r1, 0xd01, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) 2.505931494s ago: executing program 1 (id=856): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002a40)={0x28, 0x0, r1}, 0x28) 2.324579366s ago: executing program 1 (id=859): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 2.105557498s ago: executing program 1 (id=864): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xfffffffffffffff9, 0x0) 2.055562282s ago: executing program 2 (id=865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.878825175s ago: executing program 1 (id=868): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000020ac0514024000010203010902240001010000ff"], &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) 1.835555483s ago: executing program 2 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r1, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x4, 0x1}]}, 0x3c}}, 0x0) 1.835042307s ago: executing program 4 (id=871): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x50cc}, {0x20, 0x0, 0x0, 0x80000001}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="cc85f9e3", 0x85cc}], 0x1}}], 0x1, 0x0) 1.806625425s ago: executing program 0 (id=872): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x8) 1.726675732s ago: executing program 4 (id=873): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000c40)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x7, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "caa7c1b7f4c336af"}}}}}}}, 0x0) 1.702532021s ago: executing program 2 (id=874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) 1.685252013s ago: executing program 3 (id=875): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYBLOB='\fW'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1000c000) 1.647438962s ago: executing program 0 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) 1.61923611s ago: executing program 4 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x14, r1, 0x309}, 0x14}}, 0x0) 1.571793198s ago: executing program 2 (id=878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x4800) 1.506584226s ago: executing program 2 (id=879): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x3ed, 0x117452281b1ee7e5, 0x70bd26, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000804}, 0x8800) close(r0) 1.506032142s ago: executing program 3 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}]}}}}}}}, 0x0) 1.48813899s ago: executing program 4 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) pread64(r0, 0x0, 0x0, 0x0) 1.416776508s ago: executing program 0 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'p'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 1.338351286s ago: executing program 2 (id=883): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.266939234s ago: executing program 0 (id=884): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x81, 0x2000, 0x0, 0x0}) 1.209597357s ago: executing program 3 (id=885): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000880)={'gre0\x00', r1, 0x8700, 0x10, 0x596, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast}}}}) 1.017413244s ago: executing program 3 (id=886): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 916.814674ms ago: executing program 0 (id=887): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) 734.330243ms ago: executing program 3 (id=888): syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @random="156307be2ebb", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @ipv4}}}}}}, 0x0) 659.91103ms ago: executing program 0 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f00000003c0)=0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0), 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) 615.43876ms ago: executing program 4 (id=890): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010103}, 0x0, r1}) 442.267278ms ago: executing program 3 (id=891): symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 86.701377ms ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 4 (id=893): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000008020000001400000000000001050b000000ffffffff00d4c730bb614282a098640850cc1e9314f892a74e7f5d51af3c3c6b94d78c72f9915c86131365d67eb3e4d98e5b7d35c341be20896e161dbf92b7b312c87af9291dcfb30fc5f758ecf30618945e23a14b699db5a5fa9ac098695d84afefc513a9272e7cdd077b140bec54980e0b53fa0cd25f3cfef123eaa381e7c0fcefe83c6ca11200e90d3d1db0cc0114ca6947e1110000000000"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x20, 0x4, 0x3, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0, 0x700}, 0x20) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x18) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tcp_probe\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200005100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000000000000000000000000000009be4c5b9f9112f63ffffff0a000000320000005e9cdeabb01a09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r3, 0x701, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x0, 0x1}, {0x48}, {0x18}, {}, {0x16}, {0x30}, {0x1, 0x1}, {0x48}, {0x0, 0x1}, {0x48, 0x1}, {0x24, 0x1}, {0x6c}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x6c}, {0x1}, {0x9}, {0x36}, {0x6f}, {0x48}, {}, {0x16}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x4c}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): s mode [ 246.199162][ T5273] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 246.235335][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.270241][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.277848][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.286038][ T7303] bridge_slave_1: entered allmulticast mode [ 246.300680][ T7303] bridge_slave_1: entered promiscuous mode [ 246.338227][ T5273] usb 2-1: device descriptor read/64, error -71 [ 246.786643][ T5273] usb usb2-port1: attempt power cycle [ 246.813027][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.860700][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.964232][ T6984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.040326][ T7303] team0: Port device team_slave_0 added [ 247.071391][ T7303] team0: Port device team_slave_1 added [ 247.138659][ T5273] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 247.174934][ T5273] usb 2-1: device descriptor read/8, error -71 [ 247.196152][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.205889][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.240854][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.300899][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.328278][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.403272][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.448304][ T5273] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 247.479950][ T63] bridge_slave_1: left allmulticast mode [ 247.489451][ T63] bridge_slave_1: left promiscuous mode [ 247.525839][ T5273] usb 2-1: device descriptor read/8, error -71 [ 247.534797][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.544294][ T63] bridge_slave_0: left allmulticast mode [ 247.552820][ T54] Bluetooth: hci3: command tx timeout [ 247.568300][ T63] bridge_slave_0: left promiscuous mode [ 247.637968][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.648452][ T5273] usb usb2-port1: unable to enumerate USB device [ 249.094265][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 249.103242][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 249.113372][ T54] Bluetooth: hci2: hardware error 0x00 [ 249.241739][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.260423][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.278753][ T63] bond0 (unregistering): Released all slaves [ 249.406271][ T7303] hsr_slave_0: entered promiscuous mode [ 249.423916][ T7303] hsr_slave_1: entered promiscuous mode [ 249.437096][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.464398][ T7303] Cannot create hsr debugfs directory [ 249.628909][ T5224] Bluetooth: hci3: command tx timeout [ 250.862221][ T7303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.900511][ T7303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.937518][ T7303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.962724][ T7303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.148344][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 251.193754][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.214346][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.475094][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.608337][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.615490][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.631151][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.638368][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.918773][ T6984] veth0_vlan: entered promiscuous mode [ 253.947343][ T6984] veth1_vlan: entered promiscuous mode [ 254.132783][ T63] hsr_slave_0: left promiscuous mode [ 254.159827][ T63] hsr_slave_1: left promiscuous mode [ 254.249753][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.257214][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.285114][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.308180][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.416182][ T63] veth1_macvtap: left promiscuous mode [ 254.421849][ T63] veth0_macvtap: left promiscuous mode [ 254.427461][ T63] veth1_vlan: left promiscuous mode [ 254.496088][ T7418] cannot load conntrack support for proto=3 [ 254.568451][ T63] veth0_vlan: left promiscuous mode [ 255.270186][ T7423] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 255.585176][ T5300] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 256.218394][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.224677][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.564301][ T5300] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 257.574127][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.620521][ T5300] usb 2-1: config 0 descriptor?? [ 257.792841][ T5300] usb 2-1: selecting invalid altsetting 1 [ 257.829516][ T7436] cannot load conntrack support for proto=3 [ 257.894773][ T5300] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 257.978468][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.991080][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.000779][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.009348][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.017432][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 258.025001][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.113135][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.146390][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.294503][ T63] team0 (unregistering): Port device team_slave_1 removed [ 258.379782][ T63] team0 (unregistering): Port device team_slave_0 removed [ 258.795007][ T7442] affs: No valid root block on device nullb0 [ 259.536488][ T5273] usb 2-1: USB disconnect, device number 11 [ 260.139585][ T5224] Bluetooth: hci4: command tx timeout [ 260.497500][ T7452] fuse: Bad value for 'fd' [ 260.931834][ T7455] cannot load conntrack support for proto=3 [ 261.865097][ T6984] veth0_macvtap: entered promiscuous mode [ 261.892727][ T6984] veth1_macvtap: entered promiscuous mode [ 261.913733][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.924496][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.935324][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.946234][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.958387][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.188528][ T5224] Bluetooth: hci4: command tx timeout [ 262.189853][ T7303] veth0_vlan: entered promiscuous mode [ 262.329348][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.436352][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.454345][ T6984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.571770][ T6984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.697332][ T6984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.826129][ T7303] veth1_vlan: entered promiscuous mode [ 262.847422][ T7303] veth0_macvtap: entered promiscuous mode [ 262.856363][ T7303] veth1_macvtap: entered promiscuous mode [ 262.871544][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.882110][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.892167][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.902688][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.912655][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.923364][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.934681][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.944453][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.955005][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.964999][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.975546][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.985487][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.996052][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.007114][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.045087][ T6984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.058137][ T6984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.112710][ T6984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.124277][ T6984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.174123][ T7303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.183447][ T7303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.236110][ T7303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.246136][ T7303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.270056][ T7437] chnl_net:caif_netlink_parms(): no params data found [ 264.014953][ T7485] sctp: [Deprecated]: syz.0.365 (pid 7485) Use of int in maxseg socket option. [ 264.014953][ T7485] Use struct sctp_assoc_value instead [ 264.368281][ T5224] Bluetooth: hci4: command tx timeout [ 265.320585][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.372539][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.389228][ T7437] bridge_slave_0: entered allmulticast mode [ 265.417118][ T7437] bridge_slave_0: entered promiscuous mode [ 265.517417][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.563163][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.570798][ T7437] bridge_slave_1: entered allmulticast mode [ 265.584861][ T7437] bridge_slave_1: entered promiscuous mode [ 265.654685][ T2479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.683968][ T2479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.727627][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 266.428274][ T5224] Bluetooth: hci4: command tx timeout [ 266.460383][ T7437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.685448][ T7437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.860627][ T7536] overlayfs: conflicting options: metacopy=off,verity=on [ 266.896943][ T7536] overlayfs: failed to resolve './file1/file0': -2 [ 267.707757][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.748825][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.778394][ T7437] team0: Port device team_slave_0 added [ 267.833416][ T3733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.872347][ T7437] team0: Port device team_slave_1 added [ 267.878367][ T3733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.902859][ T7545] gretap0: entered promiscuous mode [ 267.935828][ T7545] netlink: 'syz.1.372': attribute type 2 has an invalid length. [ 267.948707][ T7545] netlink: 9 bytes leftover after parsing attributes in process `syz.1.372'. [ 268.086393][ T7437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.103740][ T7437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.174373][ T7437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.733286][ T7437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.918794][ T7437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.008271][ T7437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.112549][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.126603][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.161605][ T7437] hsr_slave_0: entered promiscuous mode [ 269.172682][ T7437] hsr_slave_1: entered promiscuous mode [ 269.185455][ T7437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.199561][ T7437] Cannot create hsr debugfs directory [ 269.677136][ T7576] can0: slcan on ptm1. [ 270.217257][ T63] bridge_slave_1: left allmulticast mode [ 270.247915][ T63] bridge_slave_1: left promiscuous mode [ 270.254158][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.309399][ T63] bridge_slave_0: left allmulticast mode [ 270.315101][ T63] bridge_slave_0: left promiscuous mode [ 270.331290][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.544720][ T63] dvmrp1 (unregistering): left allmulticast mode [ 272.672126][ T7608] netlink: zone id is out of range [ 272.679654][ T7608] netlink: zone id is out of range [ 272.685258][ T7608] netlink: zone id is out of range [ 272.690671][ T7608] netlink: zone id is out of range [ 272.710543][ T7608] netlink: set zone limit has 4 unknown bytes [ 273.896002][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.906531][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.917102][ T63] bond0 (unregistering): Released all slaves [ 274.234898][ T7574] can0 (unregistered): slcan off ptm1. [ 274.350495][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 276.334312][ T5224] Bluetooth: hci3: Malformed Event: 0x02 [ 276.427831][ T7644] netlink: 'syz.0.380': attribute type 12 has an invalid length. [ 276.438814][ T7644] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 276.604224][ T7668] xt_TCPMSS: Only works on TCP SYN packets [ 276.704914][ T63] hsr_slave_0: left promiscuous mode [ 276.748204][ T63] hsr_slave_1: left promiscuous mode [ 276.773260][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.827041][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.003708][ T7684] netlink: 200 bytes leftover after parsing attributes in process `syz.0.388'. [ 278.955028][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.391'. [ 279.317630][ T63] team0 (unregistering): Port device team_slave_1 removed [ 279.402596][ T63] team0 (unregistering): Port device team_slave_0 removed [ 280.863803][ T7708] netlink: 'syz.4.394': attribute type 4 has an invalid length. [ 280.935758][ T7711] netlink: 'syz.4.394': attribute type 4 has an invalid length. [ 281.796317][ T7724] virtio-fs: tag <(null)> not found [ 282.326466][ T7437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.444580][ T63] IPVS: stop unused estimator thread 0... [ 282.446204][ T7437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.503683][ T7437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.561561][ T7437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.834763][ T7437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.776417][ T7437] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.884717][ T7437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.895236][ T7437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.927003][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.934294][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.969004][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.976158][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.191428][ T29] audit: type=1326 audit(1727506709.323:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7754 comm="syz.4.400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x0 [ 284.558547][ T7437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.455400][ T7437] veth0_vlan: entered promiscuous mode [ 285.547485][ T7437] veth1_vlan: entered promiscuous mode [ 285.686332][ T5260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 285.718397][ T7437] veth0_macvtap: entered promiscuous mode [ 285.902819][ T5260] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 286.394957][ T7437] veth1_macvtap: entered promiscuous mode [ 286.408724][ T5260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.468721][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.530175][ T5260] usb 3-1: config 0 descriptor?? [ 286.538619][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.587031][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.588295][ T5260] cp210x 3-1:0.0: cp210x converter detected [ 286.630636][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.653825][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.339569][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.349929][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.374426][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.390365][ T7437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.524266][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.535126][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.545515][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.557619][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.567612][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.578145][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.588700][ T7437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.599187][ T7437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.610965][ T7437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.621308][ T7437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.630369][ T7437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.639471][ T7437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.648439][ T7437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.661879][ T5260] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 287.960255][ T5260] usb 3-1: cp210x converter now attached to ttyUSB0 [ 288.529923][ T2479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.545443][ T2479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.780270][ T7804] netlink: 'syz.0.405': attribute type 4 has an invalid length. [ 288.951160][ T7810] netlink: 'syz.0.405': attribute type 4 has an invalid length. [ 289.383007][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.390969][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.509475][ T7815] bad cache= option: none [ 289.509475][ T7815] [ 289.540943][ T7815] CIFS: VFS: bad cache= option: none [ 290.346251][ T1853] usb 3-1: USB disconnect, device number 2 [ 290.373116][ T1853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 290.551683][ T1853] cp210x 3-1:0.0: device disconnected [ 290.988378][ T7834] syzkaller1: entered promiscuous mode [ 290.995958][ T7834] syzkaller1: entered allmulticast mode [ 291.014788][ T7834] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 293.777242][ T7843] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.411'. [ 296.002603][ T7867] Bluetooth: MGMT ver 1.23 [ 297.342710][ T7865] ceph: No mds server is up or the cluster is laggy [ 297.461087][ T1853] libceph: connect (1)[c::]:6789 error -101 [ 297.471997][ T1853] libceph: mon0 (1)[c::]:6789 connect error [ 297.866294][ T5300] libceph: connect (1)[c::]:6789 error -101 [ 297.885082][ T5300] libceph: mon0 (1)[c::]:6789 connect error [ 298.446131][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 298.488277][ T7878] Failed to get privilege flags for destination (handle=0x0:0x0) [ 298.610197][ T29] audit: type=1326 audit(1727506723.753:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7891 comm="syz.0.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507f37dff9 code=0x0 [ 300.002100][ T29] audit: type=1326 audit(1727506725.123:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7899 comm="syz.0.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507f37dff9 code=0x0 [ 300.093189][ T7905] serio: Serial port pts0 [ 301.581928][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'. [ 301.601029][ T7903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.617229][ T7903] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 302.569584][ T7924] infiniband syz2: set active [ 302.604208][ T7924] infiniband syz2: added team_slave_1 [ 302.625723][ T29] audit: type=1326 audit(1727506727.763:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7922 comm="syz.0.429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507f37dff9 code=0x0 [ 302.727246][ T7903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.746947][ T7937] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 302.768685][ T7924] RDS/IB: syz2: added [ 302.773734][ T7924] smc: adding ib device syz2 with port count 1 [ 302.783362][ T7924] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 302.791808][ T7903] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 304.418715][ T7967] fuse: Bad value for 'fd' [ 304.442869][ T7959] vivid-002: disconnect [ 304.456671][ T7958] vivid-002: reconnect [ 304.726716][ T7972] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 304.862037][ T7972] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 304.942049][ T7975] netlink: 'syz.3.434': attribute type 2 has an invalid length. [ 308.288528][ T8018] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 308.311566][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 310.767224][ T8038] cgroup: none used incorrectly [ 311.086909][ T8038] orangefs_mount: mount request failed with -4 [ 312.292747][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.305525][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.314797][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.323377][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.334477][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 312.344026][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.386178][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.529727][ T8058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.446'. [ 312.565498][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.572924][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.580689][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.591389][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 312.600892][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.425489][ T8078] Cannot find add_set index 0 as target [ 314.586287][ T7600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.668215][ T54] Bluetooth: hci5: command tx timeout [ 314.854706][ T8090] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.453'. [ 314.871752][ T8090] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.453'. [ 316.435732][ T8105] program syz.3.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.189699][ T54] Bluetooth: hci5: command tx timeout [ 317.459460][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.466080][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.609158][ T7600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.263924][ T8125] fuse: Unknown parameter 'fd0x0000000000000007' [ 319.258325][ T5224] Bluetooth: hci5: command tx timeout [ 320.417689][ T7600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.893272][ T7600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.950452][ T8144] netlink: 40 bytes leftover after parsing attributes in process `syz.3.461'. [ 321.365950][ T5224] Bluetooth: hci5: command tx timeout [ 322.162600][ T7600] bridge_slave_1: left allmulticast mode [ 322.224491][ T7600] bridge_slave_1: left promiscuous mode [ 322.542699][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.645586][ T7600] bridge_slave_0: left allmulticast mode [ 322.669330][ T7600] bridge_slave_0: left promiscuous mode [ 322.700726][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.831377][ T7600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.853777][ T7600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.868395][ T7600] bond0 (unregistering): Released all slaves [ 324.905716][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 325.262004][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 326.498241][ T5260] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 326.524327][ T8233] input: syz1 as /devices/virtual/input/input8 [ 326.648752][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 326.662882][ T5260] usb 1-1: Using ep0 maxpacket: 32 [ 326.690152][ T5260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.694029][ T5260] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 326.694058][ T5260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.694078][ T5260] usb 1-1: Product: syz [ 326.694093][ T5260] usb 1-1: Manufacturer: syz [ 326.694108][ T5260] usb 1-1: SerialNumber: syz [ 326.696034][ T5260] usb 1-1: config 0 descriptor?? [ 326.704727][ T5260] as10x_usb: device has been detected [ 326.705132][ T5260] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 326.744276][ T5260] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 326.752063][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.752139][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.752265][ T8046] bridge_slave_0: entered allmulticast mode [ 326.753449][ T8046] bridge_slave_0: entered promiscuous mode [ 326.755801][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.755880][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.755989][ T8046] bridge_slave_1: entered allmulticast mode [ 326.757179][ T8046] bridge_slave_1: entered promiscuous mode [ 326.981499][ T5260] as10x_usb: error during firmware upload part1 [ 326.981892][ T5260] Registered device Abilis Systems DVB-Titan [ 327.033766][ T7600] hsr_slave_0: left promiscuous mode [ 327.044614][ T7600] hsr_slave_1: left promiscuous mode [ 327.047748][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.047795][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.061198][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.061219][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.108164][ T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 327.184956][ T7600] veth1_macvtap: left promiscuous mode [ 327.185057][ T7600] veth0_macvtap: left promiscuous mode [ 327.185180][ T7600] veth1_vlan: left promiscuous mode [ 327.185270][ T7600] veth0_vlan: left promiscuous mode [ 327.270520][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.420113][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.465118][ T46] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 327.513381][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.529750][ T46] usb 4-1: config 0 descriptor?? [ 327.562250][ T8244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.476'. [ 328.226572][ T7600] team0 (unregistering): Port device team_slave_1 removed [ 328.287202][ T7600] team0 (unregistering): Port device team_slave_0 removed [ 328.374385][ T938] usb 4-1: USB disconnect, device number 5 [ 328.804017][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 328.946693][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.970543][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.125244][ T938] usb 1-1: USB disconnect, device number 5 [ 329.175575][ T938] Unregistered device Abilis Systems DVB-Titan [ 329.183134][ T938] as10x_usb: device has been disconnected [ 329.441805][ T8046] team0: Port device team_slave_0 added [ 329.636455][ T8046] team0: Port device team_slave_1 added [ 330.413204][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.457408][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.565616][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.596041][ T8261] input: syz1 as /devices/virtual/input/input9 [ 330.613533][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.629140][ T8267] netlink: 'syz.3.483': attribute type 3 has an invalid length. [ 330.648078][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.675389][ T8267] netlink: 'syz.3.483': attribute type 3 has an invalid length. [ 330.800854][ T8267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'. [ 330.819465][ T8261] use of bytesused == 0 is deprecated and will be removed in the future, [ 330.998158][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.473926][ T8261] use the actual size instead. [ 332.836543][ T8046] hsr_slave_0: entered promiscuous mode [ 333.078784][ T8046] hsr_slave_1: entered promiscuous mode [ 333.108266][ T29] audit: type=1326 audit(1727506758.197:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aab7dff9 code=0x7fc00000 [ 333.195570][ T7600] IPVS: stop unused estimator thread 0... [ 333.946202][ T29] audit: type=1326 audit(1727506759.077:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.3.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4aab7dff9 code=0x7fc00000 [ 334.884714][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 338.122924][ T8046] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.181242][ T8046] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.234017][ T8046] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.333083][ T8046] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.388731][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 338.477276][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 338.658513][ T938] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 338.746379][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.841049][ T938] usb 1-1: config 0 has an invalid interface number: 116 but max is 0 [ 338.854233][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.878652][ T938] usb 1-1: config 0 has no interface number 0 [ 338.933094][ T938] usb 1-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 338.985227][ T3733] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.988210][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.992418][ T3733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.060724][ T938] usb 1-1: Product: syz [ 339.065259][ T3733] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.070628][ T938] usb 1-1: Manufacturer: syz [ 339.072526][ T3733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.076964][ T938] usb 1-1: SerialNumber: syz [ 339.089378][ T938] usb 1-1: config 0 descriptor?? [ 339.105796][ T938] belkin_sa 1-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 339.177094][ T938] usb 1-1: bcdDevice: fd7d, bfc: 0 [ 339.185960][ T938] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 339.313289][ T938] usb 1-1: USB disconnect, device number 6 [ 339.326527][ T938] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 339.441702][ T938] belkin_sa 1-1:0.116: device disconnected [ 339.771657][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.955574][ T8046] veth0_vlan: entered promiscuous mode [ 340.001229][ T8046] veth1_vlan: entered promiscuous mode [ 340.112543][ T8046] veth0_macvtap: entered promiscuous mode [ 340.161939][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 340.171559][ T8046] veth1_macvtap: entered promiscuous mode [ 340.229325][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.290497][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.347461][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.392978][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.419923][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.431089][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.467144][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.556617][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.604266][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.763089][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.788808][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.821665][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.853050][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.025078][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.054349][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.137255][ T8046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.209776][ T8046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.289523][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.307649][ T8046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.358588][ T8046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.397639][ T8046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.638392][ T8046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.743171][ T8440] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 342.206817][ T3733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.274550][ T3733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.431339][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.439337][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.528290][ T29] audit: type=1326 audit(1727506767.657:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.0.511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507f37dff9 code=0x0 [ 343.768864][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 345.029106][ T8461] delete_channel: no stack [ 345.097341][ T29] audit: type=1326 audit(1727506770.227:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8501 comm="syz.1.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f351ad7dff9 code=0x0 [ 345.253708][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 345.391685][ T8527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 346.108902][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 346.314892][ T46] usb 5-1: config 1 interface 0 altsetting 231 bulk endpoint 0x1 has invalid maxpacket 32 [ 346.358421][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.189075][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 347.198417][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.206496][ T46] usb 5-1: Product: à Œ [ 347.212591][ T46] usb 5-1: Manufacturer: ȗ⩪㞄밽屠莅ã©é½Ÿà­¾á—žæ´«ëœ à¶“ç—ǽ馊䚭讇ã•ã£¸ê—Œã“›á½‹æ¥„銹ꋥ껗⊻矤كç®è¤Ÿá„†è¨€æ™”é£§î¿€ì³¾æ…§í•€ï…–åŒ¥å¿‹å‘‘ë“„ì¯®á€ˆí†‰î˜¤è–“ä†»ç¿³ì¼Šï¹°æˆ [ 347.232455][ T46] usb 5-1: SerialNumber: ц [ 347.247332][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 347.293570][ T8535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 347.523642][ T46] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 231 proto 1 vid 0x0525 pid 0xA4A8 [ 347.571879][ T46] usb 5-1: USB disconnect, device number 3 [ 347.618828][ T46] usblp0: removed [ 348.554663][ T8578] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 348.603778][ T8578] CIFS: Unable to determine destination address [ 348.768736][ T8593] sp0: Synchronizing with TNC [ 351.869097][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 352.213465][ T8635] vhci_hcd: vhci_device speed not set [ 353.521071][ T8614] xt_nfacct: accounting object `syz1' does not exists [ 353.573739][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 353.603456][ T8618] pim6reg: entered allmulticast mode [ 355.656249][ T8641] syz.2.542 (8641): drop_caches: 2 [ 356.852497][ T8613] pim6reg: left allmulticast mode [ 357.877631][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 358.164473][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.550'. [ 358.216356][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.337893][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.673378][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.723488][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.905440][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 358.915405][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.752402][ T5224] Bluetooth: hci1: command tx timeout [ 361.899483][ T8664] chnl_net:caif_netlink_parms(): no params data found [ 363.600074][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.610060][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.617787][ T8664] bridge_slave_0: entered allmulticast mode [ 363.634031][ T8664] bridge_slave_0: entered promiscuous mode [ 363.672346][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.713295][ T8664] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.748571][ T8664] bridge_slave_1: entered allmulticast mode [ 363.780472][ T8664] bridge_slave_1: entered promiscuous mode [ 363.795250][ T5224] Bluetooth: hci1: command tx timeout [ 363.955155][ T8664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.744576][ T8664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.221224][ T5224] Bluetooth: hci1: command tx timeout [ 367.330714][ T8766] input: syz1 as /devices/virtual/input/input10 [ 367.976251][ T8773] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 368.382464][ T5224] Bluetooth: hci1: command tx timeout [ 368.501790][ T8761] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 368.555661][ T8770] bond_slave_0: entered promiscuous mode [ 368.585012][ T8768] bond_slave_0: entered allmulticast mode [ 368.661543][ T8768] bond_slave_0: left allmulticast mode [ 368.667384][ T8768] bond_slave_0: left promiscuous mode [ 368.691883][ T8664] team0: Port device team_slave_0 added [ 368.700164][ T8664] team0: Port device team_slave_1 added [ 368.837965][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.851998][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.928835][ T8664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.050791][ T8664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.057769][ T8664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.093573][ T8664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.430180][ T8664] hsr_slave_0: entered promiscuous mode [ 371.449333][ T8664] hsr_slave_1: entered promiscuous mode [ 371.504045][ T8664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.540133][ T8815] input: syz1 as /devices/virtual/input/input11 [ 371.548341][ T8664] Cannot create hsr debugfs directory [ 371.906989][ T8664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.994564][ T8822] netlink: 'syz.4.575': attribute type 9 has an invalid length. [ 372.002965][ T8822] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.575'. [ 372.094979][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 372.578781][ T8664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.780915][ T8664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.793336][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.813721][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.816091][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 372.975637][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.978989][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.979553][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 372.979840][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.090934][ T8839] sctp: [Deprecated]: syz.4.578 (pid 8839) Use of int in maxseg socket option. [ 373.090934][ T8839] Use struct sctp_assoc_value instead [ 373.636285][ T8664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.851755][ T8842] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 373.860051][ T29] audit: type=1326 audit(1727506798.997:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.860379][ T29] audit: type=1326 audit(1727506798.997:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.860483][ T29] audit: type=1326 audit(1727506798.997:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.860949][ T29] audit: type=1326 audit(1727506798.997:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.876584][ T29] audit: type=1326 audit(1727506798.997:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.876628][ T29] audit: type=1326 audit(1727506798.997:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.876661][ T29] audit: type=1326 audit(1727506798.997:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.876693][ T29] audit: type=1326 audit(1727506798.997:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.877962][ T29] audit: type=1326 audit(1727506799.017:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.878131][ T29] audit: type=1326 audit(1727506799.017:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd16157dff9 code=0x7ffc0000 [ 373.883187][ T8842] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 374.053412][ T2479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.272458][ T2479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.979308][ T8664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.069580][ T54] Bluetooth: hci0: command tx timeout [ 375.087031][ T2479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.169092][ T8844] syz.4.581: attempt to access beyond end of device [ 375.169092][ T8844] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 375.194334][ T8844] gfs2: error -5 reading superblock [ 375.299002][ T8664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.417989][ T2479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.470299][ T8664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.486179][ T8860] bridge_slave_0: left allmulticast mode [ 375.494529][ T8860] bridge_slave_0: left promiscuous mode [ 375.505532][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.517705][ T8860] bridge_slave_1: left allmulticast mode [ 375.526257][ T8860] bridge_slave_1: left promiscuous mode [ 375.535740][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.547416][ T8860] bond0: (slave bond_slave_0): Releasing backup interface [ 375.560025][ T8860] bond0: (slave bond_slave_1): Releasing backup interface [ 375.577821][ T8865] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 375.586112][ T8865] netlink: 224 bytes leftover after parsing attributes in process `syz.1.586'. [ 375.596019][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 375.624633][ T8860] team0: Port device team_slave_0 removed [ 375.631800][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 375.644821][ T8860] team0: Port device team_slave_1 removed [ 375.652336][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.660275][ T8860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.675015][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.686240][ T8860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.756648][ T8861] wg2: entered promiscuous mode [ 375.806226][ T8861] team0: Port device wg2 added [ 375.862851][ T8664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.900826][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.587'. [ 376.296001][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 376.459207][ T2479] bridge_slave_1: left allmulticast mode [ 376.464897][ T2479] bridge_slave_1: left promiscuous mode [ 376.480967][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.504764][ T2479] bridge_slave_0: left allmulticast mode [ 376.518254][ T2479] bridge_slave_0: left promiscuous mode [ 376.524122][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.209499][ T54] Bluetooth: hci0: command tx timeout [ 378.407146][ T8888] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.590'. [ 378.416934][ T8888] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 379.158839][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.165298][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.248144][ T54] Bluetooth: hci0: command tx timeout [ 379.547485][ T8897] syz.1.591: attempt to access beyond end of device [ 379.547485][ T8897] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 380.737308][ T8903] binder: 8900:8903 ioctl 4018620d 0 returned -22 [ 381.314456][ T54] Bluetooth: hci0: command tx timeout [ 381.431325][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 381.431575][ T2479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.457127][ T2479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.593536][ T2479] bond0 (unregistering): Released all slaves [ 381.855370][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 381.855434][ T29] audit: type=1326 audit(1727506806.947:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.3.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4aab7dff9 code=0x0 [ 382.483401][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.538269][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.545681][ T8828] bridge_slave_0: entered allmulticast mode [ 382.553643][ T8828] bridge_slave_0: entered promiscuous mode [ 382.848770][ T8920] trusted_key: encrypted_key: keylen parameter is missing [ 382.858445][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.867866][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.888296][ T8828] bridge_slave_1: entered allmulticast mode [ 382.894916][ T8828] bridge_slave_1: entered promiscuous mode [ 383.837101][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.864289][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.906509][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.596'. [ 384.115117][ T8828] team0: Port device team_slave_0 added [ 384.147883][ T8828] team0: Port device team_slave_1 added [ 384.325304][ T2479] hsr_slave_0: left promiscuous mode [ 384.366411][ T2479] hsr_slave_1: left promiscuous mode [ 384.378396][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.397180][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.407134][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.419843][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.461552][ T2479] veth1_macvtap: left promiscuous mode [ 384.478518][ T8945] nbd1: detected capacity change from 0 to 12 [ 384.488060][ T2479] veth0_macvtap: left promiscuous mode [ 384.500468][ T8051] block nbd1: Send control failed (result -89) [ 384.510486][ T8051] block nbd1: Request send failed, requeueing [ 384.519108][ T2479] veth1_vlan: left promiscuous mode [ 384.524445][ T2479] veth0_vlan: left promiscuous mode [ 384.529793][ T54] block nbd1: Receive control failed (result -32) [ 384.532050][ T58] block nbd1: Dead connection, failed to find a fallback [ 384.545987][ T58] block nbd1: shutting down sockets [ 384.552206][ T58] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.564159][ T58] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.581066][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.597406][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.609208][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.625345][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.637617][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.650656][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.659376][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.672698][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.685724][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.695480][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.703867][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.713750][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.723635][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.733260][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.741597][ T8051] ldm_validate_partition_table(): Disk read failed. [ 384.748764][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.758548][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.766816][ T8051] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.776807][ T8051] Buffer I/O error on dev nbd1, logical block 0, async page read [ 384.786217][ T8051] Dev nbd1: unable to read RDB block 0 [ 384.792687][ T8051] nbd1: unable to read partition table [ 384.798885][ T8051] nbd1: partition table beyond EOD, truncated [ 384.806319][ T8935] ldm_validate_partition_table(): Disk read failed. [ 384.817601][ T8935] Dev nbd1: unable to read RDB block 0 [ 384.835665][ T8935] nbd1: unable to read partition table [ 384.851800][ T8935] nbd1: partition table beyond EOD, truncated [ 384.868930][ T8051] ldm_validate_partition_table(): Disk read failed. [ 384.883185][ T8051] Dev nbd1: unable to read RDB block 0 [ 384.897651][ T8051] nbd1: unable to read partition table [ 384.926672][ T8051] nbd1: partition table beyond EOD, truncated [ 385.306997][ T2479] team0 (unregistering): Port device team_slave_1 removed [ 385.363804][ T2479] team0 (unregistering): Port device team_slave_0 removed [ 385.959580][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.975223][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.987117][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.987984][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.006088][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.018969][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.044797][ T5224] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.048265][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.052249][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.071721][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.079586][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.105899][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.220463][ T8664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.846057][ T8828] hsr_slave_0: entered promiscuous mode [ 386.975275][ T8828] hsr_slave_1: entered promiscuous mode [ 387.009128][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.016823][ T8828] Cannot create hsr debugfs directory [ 387.152078][ T8664] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.191444][ T5224] Bluetooth: hci2: command tx timeout [ 388.215407][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.222702][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.592695][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.599891][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.803893][ T8972] 9pnet_virtio: no channels available for device [ 389.518211][ T938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 389.712489][ T938] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 389.759277][ T938] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 389.788071][ T938] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 389.824428][ T938] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.839072][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.891655][ T938] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.074455][ T2479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.108412][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 390.127772][ T938] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 390.229979][ T9002] xt_cgroup: invalid path, errno=-2 [ 390.268203][ T5224] Bluetooth: hci2: command tx timeout [ 390.313421][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.351699][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.377104][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.418149][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 390.428465][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.439326][ T2479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.461586][ T9] usb 2-1: config 0 descriptor?? [ 390.523101][ T8664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.604689][ T2479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.791364][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 390.799997][ T2479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.846725][ T9008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.870299][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 390.905029][ T9008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.926346][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 390.937766][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 390.959649][ T9] usb 2-1: USB disconnect, device number 12 [ 391.049870][ T8664] veth0_vlan: entered promiscuous mode [ 391.066409][ T8664] veth1_vlan: entered promiscuous mode [ 391.150323][ T8828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.222502][ T8828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.237436][ T8828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.252632][ T9005] vxcan1: entered promiscuous mode [ 391.275956][ T8950] chnl_net:caif_netlink_parms(): no params data found [ 391.317389][ T8828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.351158][ T5224] Bluetooth: hci2: command tx timeout [ 392.839555][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 392.987789][ T2479] bond0 (unregistering): Released all slaves [ 393.437541][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.446672][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.456648][ T8950] bridge_slave_0: entered allmulticast mode [ 393.465224][ T8950] bridge_slave_0: entered promiscuous mode [ 393.504495][ T8664] veth0_macvtap: entered promiscuous mode [ 393.569214][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.603199][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.612288][ T8950] bridge_slave_1: entered allmulticast mode [ 393.627807][ T8950] bridge_slave_1: entered promiscuous mode [ 393.650838][ T8664] veth1_macvtap: entered promiscuous mode [ 394.308981][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.331406][ T2479] hsr_slave_0: left promiscuous mode [ 394.353970][ T2479] hsr_slave_1: left promiscuous mode [ 394.386021][ T2479] veth1_macvtap: left promiscuous mode [ 394.395746][ T2479] veth0_macvtap: left promiscuous mode [ 394.424637][ T2479] veth1_vlan: left promiscuous mode [ 394.430445][ T5224] Bluetooth: hci2: command tx timeout [ 394.440164][ T2479] veth0_vlan: left promiscuous mode [ 396.128344][ T9091] ebt_limit: overflow, try lower: 0/0 [ 397.079768][ T2479] team0 (unregistering): Port device wg2 removed [ 397.089038][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 397.248307][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 397.262261][ T46] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 397.272673][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.281159][ T46] usb 2-1: Product: syz [ 397.285355][ T46] usb 2-1: Manufacturer: syz [ 397.290278][ T46] usb 2-1: SerialNumber: syz [ 397.325123][ T46] usb 2-1: config 0 descriptor?? [ 397.446354][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.540144][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.551533][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.562556][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.583494][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.598658][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.614420][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.635543][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.671156][ T8950] team0: Port device team_slave_0 added [ 397.689139][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.704686][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.717210][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.743770][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.765872][ T8664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.786406][ T8664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.798761][ T8664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.809981][ T8664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.819569][ T8664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.828394][ T8664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.839873][ T938] usb 4-1: USB disconnect, device number 6 [ 397.856489][ T8664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.888210][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.899442][ T8950] team0: Port device team_slave_1 added [ 397.906449][ T46] usb 2-1: MIDIStreaming interface descriptor not found [ 398.073694][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.098469][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.128316][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.165508][ T46] usb 2-1: USB disconnect, device number 13 [ 398.190773][ T8950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.275838][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.305565][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.347952][ T8950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.043149][ T8950] hsr_slave_0: entered promiscuous mode [ 399.053397][ T8950] hsr_slave_1: entered promiscuous mode [ 399.060556][ T8950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.074412][ T8950] Cannot create hsr debugfs directory [ 399.249468][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 399.316657][ T9115] syz.3.616 (9115): /proc/9115/oom_adj is deprecated, please use /proc/9115/oom_score_adj instead. [ 399.492205][ T9110] netlink: 'syz.1.615': attribute type 1 has an invalid length. [ 399.574991][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.669496][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'. [ 400.234245][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 400.281304][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.288459][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.460577][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.491034][ T9127] netlink: 'syz.3.617': attribute type 11 has an invalid length. [ 400.511009][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.525171][ T5429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.555105][ T5429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.597407][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.604579][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.709878][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 402.537355][ T9153] ebt_limit: overflow, try lower: 0/0 [ 404.278283][ T9170] ceph: No mds server is up or the cluster is laggy [ 404.286783][ T938] libceph: connect (1)[c::]:6789 error -101 [ 404.296002][ T938] libceph: mon0 (1)[c::]:6789 connect error [ 404.644719][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.480388][ T8828] veth0_vlan: entered promiscuous mode [ 406.493807][ T8828] veth1_vlan: entered promiscuous mode [ 406.789794][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 406.947134][ T9196] serio: Serial port pts0 [ 407.754805][ T8828] veth0_macvtap: entered promiscuous mode [ 407.764481][ T8828] veth1_macvtap: entered promiscuous mode [ 407.788393][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 407.795096][ T46] usb 1-1: config 0 has an invalid interface number: 136 but max is 1 [ 407.823195][ T46] usb 1-1: config 0 has no interface number 1 [ 407.862811][ T46] usb 1-1: config 0 interface 136 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.877317][ T46] usb 1-1: config 0 interface 136 altsetting 0 endpoint 0xC has invalid maxpacket 47636, setting to 64 [ 407.882414][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.889224][ T46] usb 1-1: config 0 interface 136 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.914190][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.925802][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.943409][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.965080][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.977269][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.989078][ T46] usb 1-1: New USB device found, idVendor=0403, idProduct=f06b, bcdDevice=97.fa [ 407.998445][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.006458][ T46] usb 1-1: Product: ㊟ত襫钜ç•à£…ḟ휙䀚ã˜ëˆ®êšˆé‡—ﺴ締挋텃剟鶌蜄躜︈惀갋婎凫镰ꥯ텖ᱳ訋㉥榬櫓좞쌪꥿ᰌêˆé¢‰è¶à½’巃㘅æ£ë¨†é©”象Ặ蜞묾ê¾ç‚“뤇ዠî·ê¶žëƒ”걣匰ï¤ë„¶á©”⑶贕늲템Ӵꛆ짩塅䩖χî•ï»¦âž¬è‰˜â³‘舓å™ç¯‘ [ 408.040549][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.054903][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.073948][ T46] usb 1-1: Manufacturer: П [ 408.081713][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.097329][ T46] usb 1-1: config 0 descriptor?? [ 408.102941][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 408.117492][ T8950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.118858][ T46] ftdi_sio 1-1:0.136: FTDI USB Serial Device converter detected [ 408.138623][ T8950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.150683][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.156793][ T46] ftdi_sio ttyUSB0: unknown device type: 0x97fa [ 408.165403][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.175280][ T46] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 408.178364][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.235027][ T9207] ebt_limit: overflow, try lower: 0/0 [ 408.278533][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 408.298759][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 408.331600][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 408.409313][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.469740][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 408.499374][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.568082][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 408.634029][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.680797][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.718498][ T46] ftdi_sio ttyUSB1: unknown device type: 0x97fa [ 408.723212][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.741626][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.749243][ T9] usb 4-1: Product: syz [ 408.754273][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.768273][ T8950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.839014][ T9] usb 4-1: Manufacturer: syz [ 408.844408][ T9] usb 4-1: SerialNumber: syz [ 408.869287][ T9] usb 4-1: config 0 descriptor?? [ 408.884634][ T9] usbtest 4-1:0.0: couldn't get endpoints, -22 [ 408.896602][ T9] usbtest 4-1:0.0: probe with driver usbtest failed with error -22 [ 408.907361][ T8828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.919556][ T8828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.945111][ T8828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.003745][ T8828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.165380][ T8950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.187589][ T9] usb 4-1: USB disconnect, device number 7 [ 409.512199][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.593833][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.607343][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.647328][ T8950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.648322][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.658090][ T8950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.724590][ T5429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.741934][ T2479] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.749142][ T2479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.763939][ T5429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.800068][ T2479] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.807196][ T2479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.717632][ T9242] fuse: Bad value for 'fd' [ 410.879414][ T938] usb 1-1: USB disconnect, device number 7 [ 410.887536][ T938] ftdi_sio 1-1:0.136: device disconnected [ 410.942300][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.968359][ T9244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'. [ 411.163468][ T9244] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 411.171527][ T938] ftdi_sio 1-1:0.0: device disconnected [ 411.334352][ T9254] openvswitch: netlink: Unknown nsh attribute 0 [ 411.913446][ T9244] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 414.460005][ T9289] netlink: 'syz.3.641': attribute type 21 has an invalid length. [ 414.806115][ T9295] cannot load conntrack support for proto=3 [ 415.149697][ T9298] ebt_limit: overflow, try lower: 0/0 [ 415.451034][ T8950] veth0_vlan: entered promiscuous mode [ 415.462012][ T8950] veth1_vlan: entered promiscuous mode [ 415.483537][ T8950] veth0_macvtap: entered promiscuous mode [ 415.492637][ T8950] veth1_macvtap: entered promiscuous mode [ 415.507333][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.517915][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.527817][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.538672][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.548822][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.559560][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.569425][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.580017][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.589934][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.600445][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.611931][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.621697][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.632209][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.642340][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.653082][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.663002][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.673535][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.683465][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.694552][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.704446][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.714965][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.726146][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.736185][ T8950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.745322][ T8950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.759856][ T8950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.788268][ T8950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.887834][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 416.128575][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.136450][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.182433][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 416.208497][ T5272] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 416.238236][ T9203] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 416.247332][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.267586][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.358204][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 416.377878][ T46] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 416.394856][ T9324] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 416.401755][ T9324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 416.410414][ T9324] vhci_hcd vhci_hcd.0: Device attached [ 416.418735][ T5272] usb 1-1: config 0 has an invalid interface number: 42 but max is 0 [ 416.426553][ T46] usb 2-1: config 0 has no interface number 0 [ 416.427279][ T9203] usb 3-1: Using ep0 maxpacket: 16 [ 416.557842][ T46] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 416.569937][ T5272] usb 1-1: config 0 has no interface number 0 [ 416.592172][ T9203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 416.593872][ T46] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 416.615231][ T5272] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=38.98 [ 416.798358][ T5269] vhci_hcd: vhci_device speed not set [ 416.826210][ T46] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 416.870450][ T5302] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 416.883763][ T5269] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 416.905741][ T46] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 417.009935][ T46] usb 2-1: Product: syz [ 417.054008][ T46] usb 2-1: SerialNumber: syz [ 417.118454][ T5302] usb 4-1: Using ep0 maxpacket: 16 [ 417.168343][ T46] usb 2-1: config 0 descriptor?? [ 417.260097][ T9325] vhci_hcd: connection reset by peer [ 417.288641][ T46] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 417.301410][ T7600] vhci_hcd: stop threads [ 417.307706][ T7600] vhci_hcd: release socket [ 417.317091][ T7600] vhci_hcd: disconnect device [ 417.328581][ T5302] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 417.358140][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.426182][ T5302] usb 4-1: Product: syz [ 417.460181][ T5302] usb 4-1: Manufacturer: syz [ 417.504969][ T5302] usb 4-1: SerialNumber: syz [ 417.576969][ T5302] usb 4-1: config 0 descriptor?? [ 417.614204][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.622601][ T5272] usb 1-1: Product: syz [ 417.625943][ T5302] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 417.626768][ T5272] usb 1-1: Manufacturer: syz [ 417.639283][ T5272] usb 1-1: SerialNumber: syz [ 417.644774][ T9203] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 417.654122][ T9203] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 417.669121][ T9203] usb 3-1: Manufacturer: syz [ 417.671443][ T5302] usb 4-1: Detected FT232B [ 417.673738][ T9203] usb 3-1: SerialNumber: syz [ 417.834679][ T46] usb 2-1: USB disconnect, device number 14 [ 417.862327][ T5302] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 417.872494][ T5272] usb 1-1: config 0 descriptor?? [ 417.880449][ T5272] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40) [ 417.890815][ T5272] usb 1-1: Forcing UVC version to 1.0a [ 417.896613][ T5272] usb 1-1: No valid video chain found. [ 417.903307][ T9203] usb 3-1: config 0 descriptor?? [ 417.912375][ T9203] em28xx 3-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 417.938371][ T9203] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 417.944813][ T5302] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 417.983797][ T5302] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 418.037604][ T5302] usb 4-1: USB disconnect, device number 8 [ 418.098501][ T5272] usb 1-1: USB disconnect, device number 8 [ 418.098720][ T5302] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 418.180545][ T9203] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 418.180947][ T5302] ftdi_sio 4-1:0.0: device disconnected [ 418.285439][ T9203] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 418.304234][ T9203] em28xx 3-1:0.0: board has no eeprom [ 418.368196][ T9203] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 418.392483][ T9203] em28xx 3-1:0.0: dvb set to bulk mode. [ 418.408582][ T5272] em28xx 3-1:0.0: Binding DVB extension [ 418.453776][ T9203] usb 3-1: USB disconnect, device number 3 [ 418.477841][ T9203] em28xx 3-1:0.0: Disconnecting em28xx [ 418.528300][ T5272] em28xx 3-1:0.0: Registering input extension [ 418.550051][ T9203] em28xx 3-1:0.0: Closing input extension [ 419.039613][ T9348] IPv6: Can't replace route, no match found [ 419.216035][ T9203] em28xx 3-1:0.0: Freeing device [ 419.598486][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 420.578168][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 420.596902][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.631008][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.648186][ T9203] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 420.767752][ T46] usb 2-1: Product: syz [ 420.772430][ T46] usb 2-1: Manufacturer: syz [ 420.777285][ T46] usb 2-1: SerialNumber: syz [ 420.812188][ T9203] usb 3-1: Using ep0 maxpacket: 16 [ 420.881136][ T9368] cannot load conntrack support for proto=3 [ 421.815522][ T9203] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 421.848195][ T9203] usb 3-1: config 1 has no interface number 1 [ 421.863625][ T46] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 421.902003][ T9203] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 421.908766][ T46] usb 2-1: USB disconnect, device number 15 [ 421.942948][ T46] usblp0: removed [ 421.973540][ T9203] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.016496][ T9203] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.025797][ T9203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.034440][ T9203] usb 3-1: Product: syz [ 422.039150][ T9203] usb 3-1: Manufacturer: syz [ 422.047794][ T9203] usb 3-1: SerialNumber: syz [ 422.115106][ T9376] mmap: syz.1.656 (9376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 422.157610][ T5269] vhci_hcd: vhci_device speed not set [ 422.220642][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 422.408280][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 422.721004][ T25] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 422.764089][ T9203] usb 3-1: can't set config #1, error -71 [ 422.771180][ T9203] usb 3-1: USB disconnect, device number 4 [ 422.783490][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.791693][ T25] usb 1-1: Product: syz [ 422.795950][ T25] usb 1-1: Manufacturer: syz [ 422.801301][ T25] usb 1-1: SerialNumber: syz [ 422.842389][ T25] usb 1-1: config 0 descriptor?? [ 422.863646][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 422.869977][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 422.878812][ T25] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 422.989699][ T5273] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 423.071857][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 423.085263][ T25] usb 1-1: USB disconnect, device number 9 [ 423.159073][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 423.169255][ T5273] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 423.183749][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.199735][ T5273] usb 5-1: config 0 descriptor?? [ 423.288248][ T9203] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 423.359609][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 423.458164][ T9203] usb 3-1: Using ep0 maxpacket: 16 [ 423.497091][ T9203] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 423.500954][ T25] usb 5-1: USB disconnect, device number 4 [ 423.511427][ T9203] usb 3-1: config 0 has no interface number 0 [ 423.520533][ T9203] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 423.534626][ T9] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 423.548717][ T9] usb 2-1: config 0 has no interface number 0 [ 423.559147][ T9203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.567672][ T9203] usb 3-1: Product: syz [ 423.572195][ T9203] usb 3-1: Manufacturer: syz [ 423.577053][ T9203] usb 3-1: SerialNumber: syz [ 423.583043][ T9] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 423.592801][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.605968][ T9] usb 2-1: Product: syz [ 423.611084][ T9203] usb 3-1: config 0 descriptor?? [ 423.620500][ T9] usb 2-1: Manufacturer: syz [ 423.626333][ T9] usb 2-1: SerialNumber: syz [ 423.661321][ T9] usb 2-1: config 0 descriptor?? [ 423.693106][ T9] belkin_sa 2-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 423.719857][ T9] usb 2-1: bcdDevice: fd7d, bfc: 0 [ 423.736935][ T9] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 423.881943][ T9] usb 3-1: USB disconnect, device number 5 [ 423.894696][ T9203] usb 2-1: USB disconnect, device number 16 [ 423.907770][ T9203] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 423.926931][ T9203] belkin_sa 2-1:0.116: device disconnected [ 423.977464][ T9388] syz.0.661 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 424.018607][ T29] audit: type=1326 audit(1727507105.160:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9386 comm="syz.0.661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66b377dff9 code=0x0 [ 425.082918][ T9203] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 425.156888][ T9203] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 425.291333][ T9203] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 425.575205][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.666'. [ 425.688565][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 425.742714][ T5273] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 426.058312][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 426.249389][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.285780][ T5273] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 426.327407][ T5273] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 426.371042][ T5273] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 426.399539][ T5273] usb 2-1: Product: syz [ 426.414119][ T5273] usb 2-1: Manufacturer: syz [ 426.437300][ T5273] usb 2-1: SerialNumber: syz [ 426.502024][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 426.517505][ T9417] ip6gretap0: entered promiscuous mode [ 426.525522][ T9417] ip6gretap0: left promiscuous mode [ 426.581089][ T9418] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 426.592968][ T9418] batman_adv: batadv0: Adding interface: ip6gretap1 [ 426.600004][ T9418] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.620664][ T9203] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 426.626198][ T9418] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 426.663073][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 426.666482][ T5273] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 426.675570][ T9417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.680775][ T5273] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 426.688190][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 426.696796][ T5273] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 426.704019][ T9417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.721780][ T9417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.729930][ T9417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.737756][ T9417] batman_adv: batadv0: Removing interface: ip6gretap1 [ 426.798143][ T9203] usb 5-1: Using ep0 maxpacket: 16 [ 426.805106][ T9203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 426.837289][ T9203] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 426.848156][ T9203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 426.860359][ T9203] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 426.872591][ T5273] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 426.888228][ T5273] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 426.903163][ T9203] usb 5-1: New USB device found, idVendor=045b, idProduct=0248, bcdDevice=89.48 [ 426.909154][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.913787][ T9203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.942923][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.948427][ T5273] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 426.980160][ T9203] usb 5-1: Product: syz [ 426.984792][ T5273] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 426.986985][ T25] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 426.995685][ T9203] usb 5-1: Manufacturer: syz [ 427.033196][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.033981][ T5273] usb 2-1: USB disconnect, device number 17 [ 427.067948][ T9203] usb 5-1: SerialNumber: syz [ 427.079245][ T25] usb 4-1: config 0 descriptor?? [ 427.081416][ T9203] usb 5-1: config 0 descriptor?? [ 427.104459][ T5273] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 427.160987][ T5273] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 427.195211][ T5273] visor 2-1:1.0: device disconnected [ 427.242660][ T5269] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 427.458950][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 427.552384][ T5269] usb 1-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 427.563106][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.581168][ T5269] usb 1-1: Product: syz [ 427.586401][ T5269] usb 1-1: Manufacturer: syz [ 427.636675][ T5269] usb 1-1: SerialNumber: syz [ 427.739519][ T5269] usb 1-1: config 0 descriptor?? [ 427.807020][ T5269] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 427.835911][ T5269] usb 1-1: Detected FT232A [ 427.851653][ T5269] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 427.898872][ T25] hid-multitouch 0003:0EEF:72D0.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 427.965984][ T9203] usb 5-1: USB disconnect, device number 5 [ 428.019521][ T9430] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 428.036255][ T9] usb 1-1: USB disconnect, device number 10 [ 428.051828][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 428.058627][ T9430] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 428.063580][ T9] ftdi_sio 1-1:0.0: device disconnected [ 428.118400][ T5273] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 428.132579][ T5269] usb 4-1: USB disconnect, device number 9 [ 428.278264][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 428.293136][ T5273] usb 2-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 7.00 [ 428.302398][ T5273] usb 2-1: New USB device strings: Mfr=51, Product=2, SerialNumber=3 [ 428.310874][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 428.311861][ T5273] usb 2-1: Product: syz [ 428.324150][ T5273] usb 2-1: Manufacturer: syz [ 428.328852][ T5273] usb 2-1: SerialNumber: syz [ 428.336622][ T5273] usb 2-1: config 0 descriptor?? [ 428.344598][ T5273] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 428.356660][ T5273] usb 2-1: Detected FT2232H [ 428.552249][ T5273] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 428.562835][ T5273] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 428.580025][ T5273] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 428.593194][ T5273] usb 2-1: USB disconnect, device number 18 [ 428.611843][ T9203] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 428.620899][ T5273] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 428.632842][ T5273] ftdi_sio 2-1:0.0: device disconnected [ 428.778360][ T5269] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 429.094013][ T9203] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 429.103670][ T9203] usb 3-1: config 0 has no interface number 0 [ 429.119857][ T9203] usb 3-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 429.132713][ T9203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.150805][ T9203] usb 3-1: Product: syz [ 429.157540][ T9203] usb 3-1: Manufacturer: syz [ 429.162258][ T9203] usb 3-1: SerialNumber: syz [ 429.181434][ T9203] usb 3-1: config 0 descriptor?? [ 429.193483][ T9203] belkin_sa 3-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 429.206845][ T9203] usb 3-1: bcdDevice: fd7d, bfc: 0 [ 429.228558][ T9203] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 429.307219][ T9445] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 429.310084][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 429.326042][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.337543][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 429.349676][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26288, setting to 1024 [ 429.363536][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 429.375477][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.379368][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 429.394146][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.412009][ T25] usb 3-1: USB disconnect, device number 6 [ 429.420174][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.435304][ T25] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 429.447066][ T25] belkin_sa 3-1:0.116: device disconnected [ 429.454441][ T5269] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 429.464286][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.481319][ T5269] usb 5-1: config 0 descriptor?? [ 429.496158][ T9436] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 429.511069][ T5269] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 429.535525][ T5269] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 429.549273][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 429.571310][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 429.588821][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.606511][ T9] usb 4-1: config 0 descriptor?? [ 429.662477][ T9] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 429.757592][ T9] usb 5-1: USB disconnect, device number 6 [ 429.784293][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 429.835289][ T9] kobil_sct 5-1:0.0: device disconnected [ 429.906328][ T5272] usb 4-1: USB disconnect, device number 10 [ 430.618714][ T9451] 9pnet_fd: Insufficient options for proto=fd [ 431.830792][ T9474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.208535][ T9203] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 432.388570][ T9203] usb 3-1: Using ep0 maxpacket: 8 [ 432.398193][ T5269] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 432.405418][ T9203] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 432.414597][ T9203] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 432.435282][ T9203] usb 3-1: config 0 has no interface number 1 [ 432.446504][ T9203] usb 3-1: config 0 has no interface number 2 [ 432.455505][ T9203] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 432.509748][ T9203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.526548][ T9203] usb 3-1: config 0 descriptor?? [ 432.578415][ T5269] usb 2-1: Using ep0 maxpacket: 16 [ 432.590173][ T5269] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 432.610865][ T5269] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.620493][ T9522] netlink: 'syz.4.704': attribute type 3 has an invalid length. [ 432.626278][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 432.637707][ T5269] usb 2-1: SerialNumber: syz [ 432.649063][ T9522] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.704'. [ 432.657239][ T5269] cdc_acm 2-1:1.0: skipping garbage [ 432.668641][ T5269] cdc_acm 2-1:1.0: invalid descriptor buffer length [ 432.675433][ T5269] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 432.692168][ T5269] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 432.701312][ T5269] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 432.754159][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 432.767397][ T9203] qcserial 3-1:0.6: Qualcomm USB modem converter detected [ 432.921326][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 432.936778][ T9425] usb 2-1: USB disconnect, device number 19 [ 432.949103][ T25] usb 4-1: config 3 has an invalid interface number: 102 but max is 0 [ 432.962180][ T25] usb 4-1: config 3 has no interface number 0 [ 432.970762][ T25] usb 4-1: config 3 interface 102 has no altsetting 0 [ 432.992612][ T9] usb 3-1: USB disconnect, device number 7 [ 433.000030][ T25] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 433.003903][ T9] qcserial 3-1:0.6: device disconnected [ 433.024461][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.048882][ T25] usb 4-1: Product: syz [ 433.053100][ T25] usb 4-1: Manufacturer: syz [ 433.065974][ T25] usb 4-1: SerialNumber: syz [ 433.308246][ T25] ums-usbat 4-1:3.102: USB Mass Storage device detected [ 433.328672][ T25] ums-usbat 4-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 433.336109][ T25] ums-usbat 4-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.11.0-syzkaller-11728-gad46e8f95e93) [ 433.336109][ T25] Please send a copy of this message to and [ 433.339570][ T9203] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 433.431287][ T25] usb 4-1: USB disconnect, device number 11 [ 433.688329][ T9203] usb 5-1: Using ep0 maxpacket: 8 [ 433.795831][ T9203] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 433.959632][ T9203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.165461][ T9203] usb 5-1: config 0 descriptor?? [ 434.190592][ T9203] usblcd 5-1:0.0: USBLCD model not supported. [ 434.306710][ T9559] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.712'. [ 434.449862][ T5273] usb 5-1: USB disconnect, device number 7 [ 434.458229][ T9425] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 434.551086][ T5269] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 434.838091][ T9425] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 434.874034][ T9425] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 434.924244][ T9425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 434.954649][ T9425] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.997023][ T9425] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 435.006534][ T9425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.014881][ T9425] usb 3-1: Product: syz [ 435.019139][ T9425] usb 3-1: Manufacturer: syz [ 435.023748][ T9425] usb 3-1: SerialNumber: syz [ 435.033521][ T9425] usb 3-1: config 0 descriptor?? [ 435.039688][ T9555] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 435.050329][ T5269] usb 2-1: not running at top speed; connect to a high speed hub [ 435.062753][ T5269] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 435.072550][ T5269] usb 2-1: config 1 has no interface number 1 [ 435.079142][ T5269] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 435.093171][ T5269] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 4 [ 435.108230][ T5269] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 435.126135][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.134311][ T9425] rc_core: IR keymap rc-imon-rsc not found [ 435.140276][ T9425] Registered IR keymap rc-empty [ 435.147212][ T9425] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 435.160252][ T9425] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 435.172255][ T5269] usb 2-1: Product: syz [ 435.176456][ T5269] usb 2-1: Manufacturer: syz [ 435.186214][ T5269] usb 2-1: SerialNumber: syz [ 435.228786][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 435.236611][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 435.306971][ T5273] usb 3-1: USB disconnect, device number 8 [ 435.399476][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 435.406762][ T25] usb 4-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 435.422929][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.431193][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 435.441011][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 435.451337][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 435.463325][ T25] usb 4-1: config 0 descriptor?? [ 435.468722][ T5269] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 435.477649][ T5269] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 435.487989][ T25] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 435.497778][ T46] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 435.508930][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.517014][ T46] usb 1-1: Product: syz [ 435.526433][ T46] usb 1-1: Manufacturer: syz [ 435.533610][ T46] usb 1-1: SerialNumber: syz [ 435.545522][ T5269] usb 2-1: USB disconnect, device number 20 [ 435.555517][ T46] usb 1-1: config 0 descriptor?? [ 435.601773][ T8051] udevd[8051]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.702602][ T25] usb 4-1: qt2_attach - failed to power on unit: -71 [ 435.716668][ T25] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 435.734836][ T25] usb 4-1: USB disconnect, device number 12 [ 435.783773][ T46] usb 1-1: USB disconnect, device number 11 [ 435.827316][ T9586] netlink: 'syz.4.720': attribute type 3 has an invalid length. [ 435.840889][ T9586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'. [ 435.851308][ T9586] netlink: 'syz.4.720': attribute type 3 has an invalid length. [ 435.864060][ T9586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'. [ 436.822638][ T9602] netlink: 'syz.3.728': attribute type 2 has an invalid length. [ 437.246051][ T5269] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 437.452104][ T5269] usb 2-1: unable to get BOS descriptor or descriptor too short [ 437.473879][ T5269] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.902159][ T5269] usb 2-1: config 1 interface 0 has no altsetting 0 [ 437.911880][ T5269] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 437.921620][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.930165][ T5269] usb 2-1: Product: syz [ 437.934813][ T5269] usb 2-1: Manufacturer: syz [ 437.941229][ T5269] usb 2-1: SerialNumber: syz [ 437.966750][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'. [ 437.988842][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'. [ 438.011909][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 438.074308][ T9627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.736'. [ 438.239237][ T5269] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 438.272310][ T4658] bcm5974 2-1:1.0: could not read from device [ 438.344768][ T5269] usb 2-1: USB disconnect, device number 21 [ 438.356381][ T4658] bcm5974 2-1:1.0: could not read from device [ 438.375216][ T4658] bcm5974 2-1:1.0: could not read from device [ 438.646754][ T8054] udevd[8054]: Error opening device "/dev/input/event4": No such file or directory [ 438.722922][ T8054] udevd[8054]: Unable to EVIOCGABS device "/dev/input/event4" [ 438.795752][ T8054] udevd[8054]: Unable to EVIOCGABS device "/dev/input/event4" [ 438.869586][ T8054] udevd[8054]: Unable to EVIOCGABS device "/dev/input/event4" [ 438.877647][ T8054] udevd[8054]: Unable to EVIOCGABS device "/dev/input/event4" [ 439.888641][ T9203] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 440.030724][ T9664] @ÿ: renamed from veth0_vlan (while UP) [ 440.062740][ T9203] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.077142][ T9668] netlink: 'syz.3.748': attribute type 4 has an invalid length. [ 440.094355][ T9203] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 440.123975][ T9668] netlink: 'syz.3.748': attribute type 4 has an invalid length. [ 440.128329][ T9203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.169801][ T9203] usb 1-1: config 0 descriptor?? [ 440.275949][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.282476][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.648481][ T5269] usb 1-1: USB disconnect, device number 12 [ 441.073933][ T9692] ebt_limit: overflow, try lower: 0/0 [ 441.826306][ T9700] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 441.838485][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 441.962779][ T5224] Bluetooth: hci5: unexpected event for opcode 0x203c [ 441.995122][ T9711] netlink: 'syz.2.768': attribute type 4 has an invalid length. [ 442.010203][ T9711] netlink: 'syz.2.768': attribute type 4 has an invalid length. [ 442.148399][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 442.156842][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 442.175909][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 442.315455][ T46] usb 4-1: config 0 has an invalid interface number: 116 but max is 0 [ 442.329410][ T46] usb 4-1: config 0 has no interface number 0 [ 442.336086][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.383721][ T46] usb 4-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=fd.7d [ 442.417668][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 442.456263][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.535847][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.555251][ T46] usb 4-1: Product: syz [ 442.576352][ T46] usb 4-1: Manufacturer: syz [ 442.612812][ T46] usb 4-1: SerialNumber: syz [ 442.622595][ T25] usb 5-1: config 0 descriptor?? [ 442.655720][ T25] pwc: Philips PCA646VC USB webcam detected. [ 442.797491][ T46] usb 4-1: config 0 descriptor?? [ 442.858348][ T25] pwc: send_video_command error -71 [ 442.874784][ T46] belkin_sa 4-1:0.116: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 442.886296][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 442.902611][ T25] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 442.912211][ T46] usb 4-1: bcdDevice: fd7d, bfc: 0 [ 442.919642][ T46] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 442.951810][ T25] usb 5-1: USB disconnect, device number 8 [ 443.080123][ T46] usb 4-1: USB disconnect, device number 13 [ 443.097862][ T46] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 443.112316][ T46] belkin_sa 4-1:0.116: device disconnected [ 443.319309][ T9738] ebt_limit: overflow, try lower: 0/0 [ 443.471024][ T9203] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 443.645393][ T9203] usb 2-1: config index 0 descriptor too short (expected 65323, got 119) [ 443.657418][ T9203] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.941122][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 443.949105][ T9203] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 443.959849][ T9203] usb 2-1: config 1 has no interface number 1 [ 443.966482][ T9203] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 443.984730][ T9203] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.000787][ T9203] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.013098][ T9203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.021900][ T9742] netlink: 25 bytes leftover after parsing attributes in process `syz.4.778'. [ 444.047679][ T9203] usb 2-1: Product: syz [ 444.054886][ T9203] usb 2-1: Manufacturer: syz [ 444.066673][ T9203] usb 2-1: SerialNumber: syz [ 444.098139][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 444.110659][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 444.119597][ T9] usb 1-1: config 0 has no interface number 0 [ 444.125772][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 444.177276][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 444.229666][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 444.255118][ T9] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 444.281434][ T9] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 444.320591][ T9203] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 444.340426][ T9] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 444.371687][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.393490][ T9203] usb 2-1: USB disconnect, device number 22 [ 444.400182][ T9] usb 1-1: Product: syz [ 444.416894][ T9] usb 1-1: Manufacturer: syz [ 444.436881][ T9] usb 1-1: SerialNumber: syz [ 444.464939][ T8051] udevd[8051]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.494438][ T9] usb 1-1: config 0 descriptor?? [ 444.892621][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 444.918298][ T9] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 444.939857][ T9] usb 1-1: USB disconnect, device number 13 [ 445.033464][ T9768] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.368194][ T9203] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 445.552801][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 446.657588][ T9793] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 446.897505][ T9799] netlink: 'syz.4.803': attribute type 4 has an invalid length. [ 446.903269][ T9203] usb 4-1: Using ep0 maxpacket: 16 [ 446.916099][ T9203] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 446.925776][ T9203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.934646][ T9203] usb 4-1: Product: syz [ 446.939016][ T9203] usb 4-1: Manufacturer: syz [ 446.943714][ T9203] usb 4-1: SerialNumber: syz [ 446.952797][ T9203] r8152-cfgselector 4-1: Unknown version 0x0000 [ 446.958180][ T5302] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 446.963558][ T9203] r8152-cfgselector 4-1: config 0 descriptor?? [ 447.000179][ T9802] netlink: 'syz.4.803': attribute type 4 has an invalid length. [ 447.004230][ T9804] binder: 9803:9804 ioctl c018620c 20001180 returned -22 [ 447.218381][ T5302] usb 3-1: Using ep0 maxpacket: 32 [ 447.235527][ T5302] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 447.248811][ T5302] usb 3-1: config 0 has no interface number 0 [ 447.263511][ T5302] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 447.288278][ T5302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.306690][ T5302] usb 3-1: Product: syz [ 447.317689][ T5302] usb 3-1: Manufacturer: syz [ 447.357224][ T5302] usb 3-1: SerialNumber: syz [ 447.367548][ T5302] usb 3-1: config 0 descriptor?? [ 447.467780][ T9203] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 447.788162][ T5302] f81534a_ctrl 3-1:0.88: failed to set register 0x116: -5 [ 447.795352][ T5302] f81534a_ctrl 3-1:0.88: failed to enable ports: -5 [ 447.802400][ T5302] f81534a_ctrl 3-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 447.830702][ T5302] usb 3-1: USB disconnect, device number 9 [ 448.047621][ T46] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 448.178152][ T9838] ebt_limit: overflow, try lower: 0/0 [ 448.215737][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 448.382564][ T46] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 448.554752][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.307049][ T46] usb 2-1: Product: syz [ 449.311461][ T46] usb 2-1: Manufacturer: syz [ 449.316074][ T46] usb 2-1: SerialNumber: syz [ 449.350511][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.821'. [ 449.359616][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 449.432833][ T46] usb 2-1: config 0 descriptor?? [ 449.450487][ T9847] tmpfs: Bad value for 'mpol' [ 449.455812][ T46] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 449.553530][ T9855] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 449.657467][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.673469][ T9855] team0: Port device batadv0 added [ 449.799151][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 449.799913][ T46] usb 2-1: USB disconnect, device number 23 [ 450.028992][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 450.256616][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.841'. [ 450.431335][ T9891] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 450.463534][ T9891] netlink: 'syz.0.844': attribute type 4 has an invalid length. [ 450.608553][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 450.761559][ T25] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 450.779265][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.787615][ T25] usb 4-1: Product: syz [ 450.798657][ T25] usb 4-1: Manufacturer: syz [ 450.803338][ T25] usb 4-1: SerialNumber: syz [ 450.835162][ T25] usb 4-1: config 0 descriptor?? [ 451.276625][ T25] hso 4-1:0.0: Can't find BULK IN endpoint [ 451.318761][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 451.646572][ T5272] usb 4-1: USB disconnect, device number 15 [ 451.675589][ T9929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.682912][ T9929] IPv6: NLM_F_CREATE should be set when creating new route [ 451.796516][ T9935] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071563247616) [ 451.828142][ T9935] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 452.388347][ T5302] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 452.746821][ T5302] usb 2-1: Using ep0 maxpacket: 32 [ 452.881868][ T5302] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.897956][ T5302] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 452.918137][ T5272] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 453.109660][ T5272] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 453.152010][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.168093][ T5302] usb 2-1: string descriptor 0 read error: -71 [ 453.174367][ T5302] usb 2-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 453.193446][ T5272] usb 3-1: Product: syz [ 453.214090][ T5302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.218450][ T5272] usb 3-1: Manufacturer: syz [ 453.276334][ T5272] usb 3-1: SerialNumber: syz [ 453.311330][ T5272] r8152-cfgselector 3-1: Unknown version 0x0000 [ 453.358520][ T5272] r8152-cfgselector 3-1: config 0 descriptor?? [ 453.535394][ T5302] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 454.690077][ T5302] usb 2-1: no configuration chosen from 1 choice [ 462.738042][ C1] sched: DL replenish lagged too much [ 475.094080][ T5302] usb 2-1: USB disconnect, device number 24 [ 483.323463][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 501.713461][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.728100][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.916000][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 563.156963][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.163401][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 602.974981][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.097461][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.196625][ T11]  (unregistering): (slave macvlan0): Releasing backup interface [ 603.257820][ T11] veth1_vlan: left allmulticast mode [ 603.310179][ T11]  (unregistering): Released all slaves [ 603.493781][ T30] INFO: task syz-executor:5205 blocked for more than 143 seconds. [ 603.503001][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 603.517011][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.543586][ T30] task:syz-executor state:D stack:20528 pid:5205 tgid:5205 ppid:5203 flags:0x00000002 [ 603.569335][ T30] Call Trace: [ 603.572666][ T30] [ 603.575622][ T30] __schedule+0x1843/0x4ae0 [ 603.597781][ T30] ? __pfx___schedule+0x10/0x10 [ 603.613504][ T30] ? __pfx_lock_release+0x10/0x10 [ 603.623845][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 603.641392][ T30] ? schedule+0x90/0x320 [ 603.645695][ T30] schedule+0x14b/0x320 [ 603.668746][ T30] start_this_handle+0x55d/0x2110 [ 603.673849][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 603.692848][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 603.708269][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 603.714412][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 603.738147][ T30] ? rcu_is_watching+0x15/0xb0 [ 603.742979][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 603.773943][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 603.785460][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 603.800837][ T30] jbd2__journal_start+0x2da/0x5d0 [ 603.806019][ T30] __ext4_journal_start_sb+0x239/0x600 [ 603.828119][ T30] ext4_dirty_inode+0x92/0x110 [ 603.832957][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 603.874294][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 603.893841][ T30] file_update_time+0x3b3/0x430 [ 603.910361][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 603.915371][ T30] ? do_wp_page+0x71c/0x52d0 [ 603.938230][ T30] ? do_wp_page+0x22f4/0x52d0 [ 603.942973][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 603.958102][ T30] do_page_mkwrite+0x198/0x480 [ 603.963123][ T30] do_wp_page+0x23d3/0x52d0 [ 603.967667][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 603.999208][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 604.004302][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 604.032842][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 604.037982][ T30] ? tcp_recvmsg+0x390/0x920 [ 604.057760][ T30] handle_pte_fault+0x10e3/0x6800 [ 604.078093][ T30] ? mark_lock+0x9a/0x360 [ 604.082484][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 604.087896][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 604.113412][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 604.126983][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 604.141601][ T30] handle_mm_fault+0x1053/0x1ad0 [ 604.146627][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 604.173389][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 604.189435][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 604.194714][ T30] ? exc_page_fault+0x113/0x8c0 [ 604.216185][ T30] exc_page_fault+0x459/0x8c0 [ 604.226115][ T30] asm_exc_page_fault+0x26/0x30 [ 604.242767][ T30] RIP: 0033:0x7f0b61067344 [ 604.247341][ T30] RSP: 002b:00007ffd958c6210 EFLAGS: 00010202 [ 604.266450][ T30] RAX: 00007f0b5f108000 RBX: 000055558da20f40 RCX: 0000000000000002 [ 604.287657][ T30] RDX: 1ffffffff17377ea RSI: 000055558da1d588 RDI: 0000000000000004 [ 604.308113][ T30] RBP: 00007ffd958c66f0 R08: 000055558da1d5d0 R09: 0000000000002efd [ 604.316171][ T30] R10: 00007f0b6200c0b8 R11: 0000000000000246 R12: 00007ffd958c6540 [ 604.348159][ T30] R13: 0000000000000005 R14: 00007ffd958c6280 R15: 00007ffd958c6350 [ 604.356204][ T30] [ 604.389492][ T30] INFO: task syz.2.883:9980 blocked for more than 144 seconds. [ 604.397185][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 604.442936][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.468266][ T30] task:syz.2.883 state:D stack:23808 pid:9980 tgid:9980 ppid:8828 flags:0x00000004 [ 604.496984][ T30] Call Trace: [ 604.503683][ T30] [ 604.506649][ T30] __schedule+0x1843/0x4ae0 [ 604.528288][ T30] ? __pfx___schedule+0x10/0x10 [ 604.533216][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.550852][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 604.556828][ T30] ? schedule+0x90/0x320 [ 604.582190][ T30] schedule+0x14b/0x320 [ 604.586432][ T30] start_this_handle+0x55d/0x2110 [ 604.604481][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 604.618311][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 604.623864][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 604.644916][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 604.661835][ T30] ? rcu_is_watching+0x15/0xb0 [ 604.688106][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 604.693456][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 604.718246][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 604.723954][ T30] jbd2__journal_start+0x2da/0x5d0 [ 604.739830][ T30] __ext4_journal_start_sb+0x239/0x600 [ 604.745363][ T30] ext4_dirty_inode+0x92/0x110 [ 604.778271][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 604.783714][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 604.798122][ T30] file_update_time+0x3b3/0x430 [ 604.803127][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 604.823661][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 604.844738][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 604.858064][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 604.863593][ T30] do_page_mkwrite+0x198/0x480 [ 604.884126][ T30] handle_pte_fault+0x11fa/0x6800 [ 604.890954][ T30] ? mark_lock+0x9a/0x360 [ 604.895339][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 604.918083][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 604.923525][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 604.948276][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 604.954155][ T30] handle_mm_fault+0x1053/0x1ad0 [ 604.973626][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 604.988468][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 605.004030][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 605.023719][ T30] ? exc_page_fault+0x113/0x8c0 [ 605.028777][ T30] exc_page_fault+0x459/0x8c0 [ 605.033497][ T30] asm_exc_page_fault+0x26/0x30 [ 605.068228][ T30] RIP: 0033:0x7f1cdfc5d366 [ 605.072703][ T30] RSP: 002b:00007ffeb2cc05a0 EFLAGS: 00010202 [ 605.108129][ T30] RAX: 0000000000004008 RBX: 00007f1ce0a65720 RCX: 0000000000000000 [ 605.116167][ T30] RDX: 0000001b3321c000 RSI: 0000000000000008 RDI: 00007f1ce0a65720 [ 605.163125][ T30] RBP: ffffffff82166881 R08: 00007f1cdf4010d0 R09: 00007f1cdff22000 [ 605.188232][ T30] R10: 0000000081366c32 R11: 0000000000000001 R12: 0000000000000150 [ 605.196259][ T30] R13: 00007f1cdff36018 R14: 0000000000000099 R15: ffffffffffffc000 [ 605.231261][ T30] ? __fget_files+0x351/0x470 [ 605.236018][ T30] [ 605.276307][ T30] INFO: task syz.0.889:9993 blocked for more than 145 seconds. [ 605.311644][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 605.338227][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.346946][ T30] task:syz.0.889 state:D stack:23632 pid:9993 tgid:9993 ppid:8664 flags:0x00000004 [ 605.400934][ T30] Call Trace: [ 605.404266][ T30] [ 605.407214][ T30] __schedule+0x1843/0x4ae0 [ 605.429865][ T30] ? __pfx___schedule+0x10/0x10 [ 605.434792][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.458063][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 605.464051][ T30] ? schedule+0x90/0x320 [ 605.485145][ T30] schedule+0x14b/0x320 [ 605.494926][ T30] start_this_handle+0x55d/0x2110 [ 605.508247][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 605.513344][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 605.543644][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 605.558058][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 605.563401][ T30] ? rcu_is_watching+0x15/0xb0 [ 605.583487][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 605.590037][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 605.595464][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 605.618133][ T30] jbd2__journal_start+0x2da/0x5d0 [ 605.623313][ T30] __ext4_journal_start_sb+0x239/0x600 [ 605.648072][ T30] ext4_dirty_inode+0x92/0x110 [ 605.652908][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.678245][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 605.683348][ T30] file_update_time+0x3b3/0x430 [ 605.698151][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 605.703160][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 605.738185][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.743723][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 605.758141][ T30] do_page_mkwrite+0x198/0x480 [ 605.762976][ T30] handle_pte_fault+0x11fa/0x6800 [ 605.788297][ T30] ? mark_lock+0x9a/0x360 [ 605.793452][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 605.816620][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 605.838249][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 605.843532][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 605.858072][ T30] handle_mm_fault+0x1053/0x1ad0 [ 605.863103][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 605.884850][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 605.898059][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 605.903328][ T30] ? exc_page_fault+0x113/0x8c0 [ 605.923698][ T30] exc_page_fault+0x459/0x8c0 [ 605.938066][ T30] asm_exc_page_fault+0x26/0x30 [ 605.942977][ T30] RIP: 0033:0x7f66b365d366 [ 605.947413][ T30] RSP: 002b:00007ffd9f27aac0 EFLAGS: 00010202 [ 605.980265][ T30] RAX: 000000000000f008 RBX: 00007f66b4465720 RCX: 0000000000000000 [ 605.997140][ T30] RDX: 0000001b30511000 RSI: 0000000000000008 RDI: 00007f66b4465720 [ 606.018059][ T30] RBP: ffffffff897df2a6 R08: 00007f66b0a01070 R09: 00007f66b3922000 [ 606.026094][ T30] R10: 0000000081366f1c R11: 000000000000001d R12: 000000000000013f [ 606.068063][ T30] R13: 00007f66b3936378 R14: 00000000000000e6 R15: ffffffffffff1000 [ 606.076112][ T30] ? __sock_create+0x416/0x920 [ 606.098995][ T30] [ 606.102150][ T30] INFO: task syz.0.889:10000 blocked for more than 145 seconds. [ 606.128177][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 606.135508][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.178081][ T30] task:syz.0.889 state:D stack:26912 pid:10000 tgid:9993 ppid:8664 flags:0x00000004 [ 606.218463][ T30] Call Trace: [ 606.221794][ T30] [ 606.224741][ T30] __schedule+0x1843/0x4ae0 [ 606.253739][ T30] ? __pfx___schedule+0x10/0x10 [ 606.258786][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.263852][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.288241][ T30] ? schedule+0x90/0x320 [ 606.292557][ T30] schedule+0x14b/0x320 [ 606.296742][ T30] start_this_handle+0x55d/0x2110 [ 606.327137][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 606.344127][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 606.358166][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 606.364288][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 606.386529][ T30] ? rcu_is_watching+0x15/0xb0 [ 606.403029][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 606.414281][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 606.432003][ T30] jbd2__journal_start+0x2da/0x5d0 [ 606.444145][ T30] __ext4_journal_start_sb+0x239/0x600 [ 606.463725][ T30] ext4_fileattr_set+0x8fa/0x16e0 [ 606.474123][ T30] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 606.488070][ T30] ? __asan_memset+0x23/0x50 [ 606.492713][ T30] ? fileattr_fill_flags+0x1d4/0x310 [ 606.512910][ T30] ? fscrypt_prepare_setflags+0x61/0x220 [ 606.530054][ T30] vfs_fileattr_set+0x8ff/0xd50 [ 606.534976][ T30] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 606.556786][ T30] do_vfs_ioctl+0x207a/0x2e40 [ 606.573106][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 606.588118][ T30] ? mark_lock+0x9a/0x360 [ 606.592526][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 606.614756][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.628086][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 606.633345][ T30] ? kfree+0x1a0/0x440 [ 606.637433][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 606.669617][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 606.675323][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 606.702524][ T30] ? smack_log+0x123/0x540 [ 606.707013][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.728164][ T30] ? __pfx_smack_log+0x10/0x10 [ 606.733001][ T30] ? smk_access+0x4ab/0x4e0 [ 606.737554][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 606.766783][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 606.783997][ T30] ? __fget_files+0x3f3/0x470 [ 606.803574][ T30] __se_sys_ioctl+0x81/0x170 [ 606.808263][ T30] do_syscall_64+0xf3/0x230 [ 606.812797][ T30] ? clear_bhb_loop+0x35/0x90 [ 606.853591][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.859681][ T30] RIP: 0033:0x7f66b377dff9 [ 606.864118][ T30] RSP: 002b:00007f66b4525038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.899694][ T30] RAX: ffffffffffffffda RBX: 00007f66b3936208 RCX: 00007f66b377dff9 [ 606.907814][ T30] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000008 [ 606.963845][ T30] RBP: 00007f66b37f0296 R08: 0000000000000000 R09: 0000000000000000 [ 606.998141][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.006172][ T30] R13: 0000000000000001 R14: 00007f66b3936208 R15: 00007ffd9f27aa48 [ 607.038095][ T30] [ 607.043158][ T30] INFO: task syz.3.891:9999 blocked for more than 146 seconds. [ 607.067681][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 607.085734][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.108055][ T30] task:syz.3.891 state:D stack:26848 pid:9999 tgid:9999 ppid:7437 flags:0x00000004 [ 607.134656][ T30] Call Trace: [ 607.137988][ T30] [ 607.146756][ T30] __schedule+0x1843/0x4ae0 [ 607.161421][ T30] ? __pfx___schedule+0x10/0x10 [ 607.166326][ T30] ? __pfx_lock_release+0x10/0x10 [ 607.186805][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 607.205741][ T30] ? schedule+0x90/0x320 [ 607.221495][ T30] schedule+0x14b/0x320 [ 607.233983][ T30] start_this_handle+0x55d/0x2110 [ 607.247582][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 607.258124][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 607.263662][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 607.287124][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 607.308209][ T30] ? rcu_is_watching+0x15/0xb0 [ 607.313106][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 607.328190][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 607.333618][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 607.362835][ T30] jbd2__journal_start+0x2da/0x5d0 [ 607.383683][ T30] __ext4_journal_start_sb+0x239/0x600 [ 607.389334][ T30] ext4_dirty_inode+0x92/0x110 [ 607.394148][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 607.416655][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 607.427381][ T30] file_update_time+0x3b3/0x430 [ 607.443201][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 607.453575][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 607.469390][ T30] ? pte_alloc_one+0x442/0x5d0 [ 607.474215][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 607.498061][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 607.503859][ T30] do_page_mkwrite+0x198/0x480 [ 607.523402][ T30] handle_pte_fault+0x11fa/0x6800 [ 607.543609][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 607.563769][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 607.569097][ T30] ? __pmd_alloc+0x4ff/0x620 [ 607.573717][ T30] ? __pfx_lock_release+0x10/0x10 [ 607.598197][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 607.603563][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 607.624533][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 607.638547][ T30] ? __pfx___pmd_alloc+0x10/0x10 [ 607.643551][ T30] handle_mm_fault+0x1053/0x1ad0 [ 607.663886][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 607.684311][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 607.689783][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 607.695028][ T30] ? exc_page_fault+0x113/0x8c0 [ 607.715999][ T30] exc_page_fault+0x459/0x8c0 [ 607.731364][ T30] asm_exc_page_fault+0x26/0x30 [ 607.736282][ T30] RIP: 0033:0x7fe4aaa51b84 [ 607.762993][ T30] RSP: 002b:00007ffea1e6e790 EFLAGS: 00010246 [ 607.778074][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 607.786095][ T30] RDX: 0000001b2be20000 RSI: 0000000000400000 RDI: 00007fe4aac71f90 [ 607.824271][ T30] RBP: 00007ffea1e6e9ec R08: 0000000000000004 R09: 0000000000040000 [ 607.844944][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 607.888127][ T30] R13: 000000000006eb0a R14: 000000000006eab7 R15: 00007ffea1e6ea40 [ 607.908138][ T30] [ 607.919019][ T30] INFO: task syz.1.892:10001 blocked for more than 147 seconds. [ 607.926705][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 607.973534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 608.013495][ T30] task:syz.1.892 state:D stack:26800 pid:10001 tgid:10001 ppid:8046 flags:0x00000004 [ 608.054145][ T30] Call Trace: [ 608.057538][ T30] [ 608.060983][ T30] __schedule+0x1843/0x4ae0 [ 608.065556][ T30] ? __pfx___schedule+0x10/0x10 [ 608.103449][ T30] ? __pfx_lock_release+0x10/0x10 [ 608.133552][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 608.147169][ T30] ? schedule+0x90/0x320 [ 608.163926][ T30] schedule+0x14b/0x320 [ 608.171208][ T30] start_this_handle+0x55d/0x2110 [ 608.176286][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 608.218090][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 608.223639][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 608.258081][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 608.263433][ T30] ? rcu_is_watching+0x15/0xb0 [ 608.303093][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 608.328125][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 608.333558][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 608.358064][ T30] jbd2__journal_start+0x2da/0x5d0 [ 608.363251][ T30] __ext4_journal_start_sb+0x239/0x600 [ 608.408171][ T30] ext4_dirty_inode+0x92/0x110 [ 608.413003][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 608.448121][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 608.453221][ T30] file_update_time+0x3b3/0x430 [ 608.484137][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 608.508125][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 608.513299][ T30] ? pte_alloc_one+0x442/0x5d0 [ 608.544059][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 608.557207][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 608.588206][ T30] do_page_mkwrite+0x198/0x480 [ 608.593046][ T30] handle_pte_fault+0x11fa/0x6800 [ 608.628147][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 608.633597][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 608.668139][ T30] ? __pmd_alloc+0x4ff/0x620 [ 608.677888][ T30] ? __pfx_lock_release+0x10/0x10 [ 608.708170][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 608.713276][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 608.738192][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 608.744155][ T30] ? __pfx___pmd_alloc+0x10/0x10 [ 608.784605][ T30] handle_mm_fault+0x1053/0x1ad0 [ 608.803606][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 608.828319][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 608.833588][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 608.874211][ T30] ? exc_page_fault+0x113/0x8c0 [ 608.886332][ T30] exc_page_fault+0x459/0x8c0 [ 608.912247][ T30] asm_exc_page_fault+0x26/0x30 [ 608.917171][ T30] RIP: 0033:0x7f351ac51b84 [ 608.948210][ T30] RSP: 002b:00007ffee9e0e2a0 EFLAGS: 00010246 [ 608.963714][ T30] RAX: 00000000005ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 608.998246][ T30] RDX: 0000001b31120000 RSI: 0000000000600000 RDI: 00007f351ae71f90 [ 609.006296][ T30] RBP: 00007ffee9e0e4fc R08: 0000000000000004 R09: 0000000000040000 [ 609.063484][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 609.087351][ T30] R13: 000000000006ea85 R14: 000000000006e5d6 R15: 00007ffee9e0e550 [ 609.128089][ T30] [ 609.137122][ T30] INFO: task syz.4.893:10003 blocked for more than 149 seconds. [ 609.168084][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 609.195837][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.228077][ T30] task:syz.4.893 state:D stack:25712 pid:10003 tgid:10003 ppid:8950 flags:0x00004004 [ 609.268066][ T30] Call Trace: [ 609.271402][ T30] [ 609.288081][ T30] __schedule+0x1843/0x4ae0 [ 609.292680][ T30] ? __pfx___schedule+0x10/0x10 [ 609.323480][ T30] ? __pfx_lock_release+0x10/0x10 [ 609.353617][ T30] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 609.360089][ T30] ? schedule+0x90/0x320 [ 609.364588][ T30] schedule+0x14b/0x320 [ 609.395689][ T30] start_this_handle+0x55d/0x2110 [ 609.413901][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 609.433584][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 609.458091][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 609.464232][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 609.503399][ T30] ? rcu_is_watching+0x15/0xb0 [ 609.522900][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 609.538232][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 609.543664][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 609.578112][ T30] jbd2__journal_start+0x2da/0x5d0 [ 609.584024][ T30] __ext4_journal_start_sb+0x239/0x600 [ 609.628282][ T30] ext4_dirty_inode+0x92/0x110 [ 609.633116][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 609.668071][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 609.673168][ T30] file_update_time+0x3b3/0x430 [ 609.698267][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 609.703283][ T30] ? irqentry_exit+0x63/0x90 [ 609.707933][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 609.758240][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 609.763775][ T30] ? do_page_mkwrite+0x12c/0x480 [ 609.786029][ T30] do_page_mkwrite+0x198/0x480 [ 609.802736][ T30] handle_pte_fault+0x11fa/0x6800 [ 609.807940][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 609.848130][ T30] ? preempt_schedule+0xe1/0xf0 [ 609.853058][ T30] ? preempt_schedule_common+0x84/0xd0 [ 609.896424][ T30] ? preempt_schedule+0xe1/0xf0 [ 609.918161][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 609.923700][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 609.968073][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 609.973516][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 610.008083][ T30] ? __pfx___pmd_alloc+0x10/0x10 [ 610.023619][ T30] handle_mm_fault+0x1053/0x1ad0 [ 610.048141][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 610.053484][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 610.088071][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 610.108417][ T30] ? exc_page_fault+0x113/0x8c0 [ 610.133548][ T30] exc_page_fault+0x459/0x8c0 [ 610.148187][ T30] asm_exc_page_fault+0x26/0x30 [ 610.153100][ T30] RIP: 0033:0x7f21ad251b84 [ 610.157534][ T30] RSP: 002b:00007ffd38f588f0 EFLAGS: 00010246 [ 610.213621][ T30] RAX: 00000000003ffdf0 RBX: 0000000000000000 RCX: 0000000000000000 [ 610.233559][ T30] RDX: 0000001b33120000 RSI: 0000000000400000 RDI: 00007f21ad471f90 [ 610.278121][ T30] RBP: 00007ffd38f58b4c R08: 0000000000000004 R09: 0000000000040000 [ 610.286163][ T30] R10: 0000000000000011 R11: 0000000000000293 R12: 0000000000000032 [ 610.328120][ T30] R13: 000000000006ecda R14: 000000000006eb59 R15: 00007ffd38f58ba0 [ 610.336185][ T30] [ 610.373522][ T30] [ 610.373522][ T30] Showing all locks held in the system: [ 610.408171][ T30] 6 locks held by kworker/u8:0/11: [ 610.413337][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 610.468221][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 610.514052][ T30] #2: ffffffff8fcb2450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 610.548093][ T30] #3: ffffffff8fcbef48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 610.588238][ T30] #4: ffff88805c2a8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 610.628073][ T30] #5: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 610.674740][ T30] 1 lock held by khungtaskd/30: [ 610.698113][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 610.728351][ T30] 3 locks held by kworker/u8:7/2479: [ 610.733696][ T30] #0: ffff88814ba39148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 610.814699][ T30] #1: ffffc900091c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 610.868222][ T30] #2: ffffffff8fcbef48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 610.877811][ T30] 1 lock held by syslogd/4655: [ 610.914071][ T30] 2 locks held by klogd/4662: [ 610.944441][ T30] 2 locks held by getty/4974: [ 610.963659][ T30] #0: ffff88814ba5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 611.008101][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 611.038137][ T30] 2 locks held by syz-executor/5205: [ 611.043489][ T30] #0: ffff88802d65c580 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 611.108073][ T30] #1: ffff88814ceb6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 611.134965][ T30] 4 locks held by kworker/1:5/5302: [ 611.163938][ T30] 4 locks held by kworker/1:7/9728: [ 611.183693][ T30] 2 locks held by syz.2.883/9980: [ 611.208092][ T30] #0: ffff88806c3ef9b8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 611.244145][ T30] #1: ffff88814ceb6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 611.265551][ T30] 2 locks held by syz.0.889/9993: [ 611.280565][ T30] #0: ffff888022b62ec8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 611.307933][ T30] #1: ffff88814ceb6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 611.343254][ T30] 3 locks held by syz.0.889/9998: [ 611.354483][ T30] #0: ffff88814ceb6420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5e/0x200 [ 611.364554][ T30] #1: ffff88814cef2160 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b4/0x380 [ 611.381737][ T30] #2: ffff88814cef23e8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x262/0xc10 [ 611.396608][ T30] 2 locks held by syz.0.889/10000: [ 611.405312][ T30] #0: ffff88814ceb6420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5e/0x200 [ 611.417669][ T30] #1: ffff8880737ec950 (&sb->s_type->i_mutex_key#7){++++}-{3:3}, at: vfs_fileattr_set+0x139/0xd50 [ 611.436522][ T30] 2 locks held by syz.3.891/9999: [ 611.442142][ T30] #0: ffff888056839148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 611.458726][ T30] #1: ffff88814ceb6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 611.475607][ T30] 2 locks held by syz.1.892/10001: [ 611.481069][ T30] #0: ffff88807be94df0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 611.497218][ T30] #1: ffff88814ceb6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 611.507289][ T30] 2 locks held by syz.4.893/10003: [ 611.518051][ T30] #0: ffff888020f53df0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 611.535746][ T30] #1: ffff88814ceb6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 611.546135][ T30] [ 611.554238][ T30] ============================================= [ 611.554238][ T30] [ 611.563195][ T30] NMI backtrace for cpu 0 [ 611.567567][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 611.577746][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 611.587821][ T30] Call Trace: [ 611.591112][ T30] [ 611.594058][ T30] dump_stack_lvl+0x241/0x360 [ 611.598755][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.603975][ T30] ? __pfx__printk+0x10/0x10 [ 611.608596][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 611.613564][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 611.619040][ T30] ? _printk+0xd5/0x120 [ 611.623218][ T30] ? __pfx__printk+0x10/0x10 [ 611.627835][ T30] ? __wake_up_klogd+0xcc/0x110 [ 611.632705][ T30] ? __pfx__printk+0x10/0x10 [ 611.637315][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 611.642366][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 611.648367][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 611.654382][ T30] watchdog+0xff4/0x1040 [ 611.658694][ T30] ? watchdog+0x1ea/0x1040 [ 611.663133][ T30] ? __pfx_watchdog+0x10/0x10 [ 611.667833][ T30] kthread+0x2f0/0x390 [ 611.671917][ T30] ? __pfx_watchdog+0x10/0x10 [ 611.676622][ T30] ? __pfx_kthread+0x10/0x10 [ 611.681232][ T30] ret_from_fork+0x4b/0x80 [ 611.685667][ T30] ? __pfx_kthread+0x10/0x10 [ 611.690272][ T30] ret_from_fork_asm+0x1a/0x30 [ 611.695068][ T30] [ 611.698725][ T30] Sending NMI from CPU 0 to CPUs 1: [ 611.703965][ C1] NMI backtrace for cpu 1 [ 611.703978][ C1] CPU: 1 UID: 0 PID: 9728 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 611.703997][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 611.704008][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 611.704031][ C1] RIP: 0010:check_preemption_disabled+0x2e/0x120 [ 611.704049][ C1] Code: 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d 0c 44 47 74 65 8b 05 01 44 47 74 a9 ff ff ff 7f 74 26 <65> 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 [ 611.704068][ C1] RSP: 0018:ffffc90000a17d48 EFLAGS: 00000002 [ 611.704081][ C1] RAX: 0000000080000102 RBX: 0000000000000001 RCX: ffffffff9a396903 [ 611.704092][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad6a0 RDI: ffffffff8c601fe0 [ 611.704104][ C1] RBP: ffffc90000a17e28 R08: ffffffff901bb66f R09: 1ffffffff20376cd [ 611.704116][ C1] R10: dffffc0000000000 R11: fffffbfff20376ce R12: dffffc0000000000 [ 611.704127][ C1] R13: 1ffff92000142fc8 R14: 94a0d9a287be8f3b R15: 1ffff92000142fb4 [ 611.704139][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 611.704152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.704163][ C1] CR2: 0000001b3051bff8 CR3: 000000006a244000 CR4: 00000000003506f0 [ 611.704177][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.704186][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.704196][ C1] Call Trace: [ 611.704201][ C1] [ 611.704208][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 611.704225][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 611.704246][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 611.704262][ C1] ? nmi_handle+0x2a/0x5a0 [ 611.704282][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 611.704300][ C1] ? nmi_handle+0x14f/0x5a0 [ 611.704314][ C1] ? nmi_handle+0x2a/0x5a0 [ 611.704328][ C1] ? check_preemption_disabled+0x2e/0x120 [ 611.704343][ C1] ? default_do_nmi+0x63/0x160 [ 611.704360][ C1] ? exc_nmi+0x123/0x1f0 [ 611.704376][ C1] ? end_repeat_nmi+0xf/0x53 [ 611.704400][ C1] ? check_preemption_disabled+0x2e/0x120 [ 611.704416][ C1] ? check_preemption_disabled+0x2e/0x120 [ 611.704432][ C1] ? check_preemption_disabled+0x2e/0x120 [ 611.704447][ C1] [ 611.704451][ C1] [ 611.704458][ C1] lockdep_hardirqs_on_prepare+0x1f9/0x780 [ 611.704480][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 611.704501][ C1] ? rcu_is_watching+0x15/0xb0 [ 611.704518][ C1] trace_hardirqs_on+0x28/0x40 [ 611.704535][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 611.704554][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 611.704577][ C1] debug_object_activate+0x3e4/0x510 [ 611.704596][ C1] ? ip_finish_output2+0x45f/0x1390 [ 611.704618][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 611.704641][ C1] ? rcuref_put_slowpath+0x138/0x340 [ 611.704659][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 611.704674][ C1] call_rcu+0x97/0xa70 [ 611.704692][ C1] ? __pfx_call_rcu+0x10/0x10 [ 611.704706][ C1] ? rcuref_put+0x1e3/0x240 [ 611.704719][ C1] ? __pfx_rcuref_put+0x10/0x10 [ 611.704737][ C1] skb_release_head_state+0x73/0x250 [ 611.704754][ C1] consume_skb+0x60/0xf0 [ 611.704768][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 611.704795][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 611.704815][ C1] ? nf_ip_checksum+0x13a/0x500 [ 611.704838][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 611.704859][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 611.704877][ C1] ? validate_chain+0x11e/0x5920 [ 611.704895][ C1] ? __pfx_validate_chain+0x10/0x10 [ 611.704914][ C1] nft_do_chain+0x4ad/0x1da0 [ 611.704941][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 611.704959][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 611.704988][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 611.705005][ C1] nft_do_chain_inet+0x418/0x6b0 [ 611.705025][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 611.705043][ C1] ? ipt_do_table+0x312/0x1860 [ 611.705069][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 611.705087][ C1] nf_hook_slow+0xc3/0x220 [ 611.705105][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 611.705121][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 611.705136][ C1] NF_HOOK+0x29e/0x450 [ 611.705152][ C1] ? NF_HOOK+0x9a/0x450 [ 611.705167][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 611.705182][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 611.705201][ C1] ? ip_rcv_finish+0x406/0x560 [ 611.705216][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 611.705232][ C1] NF_HOOK+0x3a4/0x450 [ 611.705246][ C1] ? __lock_acquire+0x1384/0x2050 [ 611.705266][ C1] ? NF_HOOK+0x9a/0x450 [ 611.705280][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 611.705294][ C1] ? ip_rcv_core+0x801/0xd10 [ 611.705310][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 611.705328][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 611.705344][ C1] __netif_receive_skb+0x2bf/0x650 [ 611.705362][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 611.705381][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 611.705397][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 611.705416][ C1] ? __pfx_lock_release+0x10/0x10 [ 611.705435][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 611.705457][ C1] process_backlog+0x662/0x15b0 [ 611.705476][ C1] ? process_backlog+0x33b/0x15b0 [ 611.705497][ C1] ? __pfx_process_backlog+0x10/0x10 [ 611.705513][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 611.705534][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 611.705555][ C1] __napi_poll+0xcb/0x490 [ 611.705572][ C1] net_rx_action+0x89b/0x1240 [ 611.705599][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 611.705616][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 611.705649][ C1] handle_softirqs+0x2c5/0x980 [ 611.705669][ C1] ? do_softirq+0x11b/0x1e0 [ 611.705686][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 611.705707][ C1] do_softirq+0x11b/0x1e0 [ 611.705724][ C1] [ 611.705729][ C1] [ 611.705734][ C1] ? __pfx_do_softirq+0x10/0x10 [ 611.705751][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 611.705772][ C1] ? rcu_is_watching+0x15/0xb0 [ 611.705792][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 611.705809][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 611.705828][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 611.705845][ C1] ? mod_peer_timer+0x21/0x260 [ 611.705864][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 611.705884][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 611.705903][ C1] ? process_scheduled_works+0x976/0x1850 [ 611.705922][ C1] process_scheduled_works+0xa63/0x1850 [ 611.705951][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.705973][ C1] ? assign_work+0x364/0x3d0 [ 611.705992][ C1] worker_thread+0x870/0xd30 [ 611.706014][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 611.706033][ C1] ? __kthread_parkme+0x169/0x1d0 [ 611.706053][ C1] ? __pfx_worker_thread+0x10/0x10 [ 611.706071][ C1] kthread+0x2f0/0x390 [ 611.706084][ C1] ? __pfx_worker_thread+0x10/0x10 [ 611.706101][ C1] ? __pfx_kthread+0x10/0x10 [ 611.706115][ C1] ret_from_fork+0x4b/0x80 [ 611.706132][ C1] ? __pfx_kthread+0x10/0x10 [ 611.706146][ C1] ret_from_fork_asm+0x1a/0x30 [ 611.706170][ C1] [ 612.439833][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 612.446732][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 612.456905][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 612.466983][ T30] Call Trace: [ 612.470281][ T30] [ 612.473222][ T30] dump_stack_lvl+0x241/0x360 [ 612.477919][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.483132][ T30] ? __pfx__printk+0x10/0x10 [ 612.487739][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.493752][ T30] ? vscnprintf+0x5d/0x90 [ 612.498109][ T30] panic+0x349/0x880 [ 612.502026][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 612.508196][ T30] ? __pfx_panic+0x10/0x10 [ 612.512631][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 612.518019][ T30] ? __irq_work_queue_local+0x137/0x410 [ 612.523586][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 612.528976][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 612.535146][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 612.541319][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 612.547496][ T30] watchdog+0x1033/0x1040 [ 612.551844][ T30] ? watchdog+0x1ea/0x1040 [ 612.556284][ T30] ? __pfx_watchdog+0x10/0x10 [ 612.560982][ T30] kthread+0x2f0/0x390 [ 612.565063][ T30] ? __pfx_watchdog+0x10/0x10 [ 612.569760][ T30] ? __pfx_kthread+0x10/0x10 [ 612.574367][ T30] ret_from_fork+0x4b/0x80 [ 612.578800][ T30] ? __pfx_kthread+0x10/0x10 [ 612.583406][ T30] ret_from_fork_asm+0x1a/0x30 [ 612.588207][ T30] [ 612.591653][ T30] Kernel Offset: disabled [ 612.595984][ T30] Rebooting in 86400 seconds..