last executing test programs: 20.451786262s ago: executing program 4 (id=2186): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="198120000000", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 20.2453722s ago: executing program 4 (id=2188): timer_create(0x6, 0x0, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "92cfca0408a444b93c368a417cf7fe41"}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x521}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 19.969296499s ago: executing program 4 (id=2190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)="e9", 0x1}], 0x2}}], 0x1, 0x0) 19.934336384s ago: executing program 3 (id=2191): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c030000", @ANYRES16=r2, @ANYBLOB="01aa47d498e3ac2676003b0000000800030007ad55aaf01dc63dd73dde89cfcebfbf52ff4feed1023f138d8f00aa70000000000c093319ab495a103137041f341bef31e8506534847babaf189cbfcfad891dd30630b90df87f04976b7bbe58314604ae047c1d572553f5e7c84eccfe2701017b2e7689dd14a1ca7e995adca460a33dee77f26f4f9acb82c89a92c464b58e299a69fa4efba4f79ce20e0fcb1645c8c92cac0923", @ANYRES32=r3, @ANYBLOB="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"], 0x35c}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r4 = memfd_secret(0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) close(0xffffffffffffffff) 19.692819109s ago: executing program 4 (id=2192): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/128, 0x80}}], 0x1, 0x30040, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a7815"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x28}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x6, 0x7a, &(0x7f0000003300)=""/122, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x208400, 0x100) r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc2038, &(0x7f0000000680)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usbip_server_init(0x0) 18.815482757s ago: executing program 3 (id=2194): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x1, 0x1bf4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4229c2, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) unshare(0x8000400) close_range(r2, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) unshare(0x280) r4 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x111100, 0x1, 0x2}, 0x18) openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x420002, 0x0) unshare(0x0) unshare(0x0) mq_notify(0xffffffffffffffff, 0x0) mq_notify(r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.627869236s ago: executing program 4 (id=2196): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000040)={0x0, "5783236af9ad6d796ce0b9c2b275ca3ec5d574aa936b23c47abdd7d6e430442f"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100600}], 0x3a, 0x1400, 0x0, 0x3) 18.363882004s ago: executing program 3 (id=2199): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000006a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000065850000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$inet6_sctp(0xa, 0x0, 0x84) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="01000000", 0x4}], 0x1) 18.235097421s ago: executing program 4 (id=2201): timer_create(0x6, 0x0, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "92cfca0408a444b93c368a417cf7fe41"}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4}, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x521}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 17.763187763s ago: executing program 3 (id=2206): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/128, 0x80}}], 0x1, 0x30040, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x28}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x6, 0x7a, &(0x7f0000003300)=""/122, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x208400, 0x100) r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc2038, &(0x7f0000000680)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usbip_server_init(0x0) 17.182531742s ago: executing program 0 (id=2207): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000011) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x82}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2, 0xe4ffffff}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}]}, 0x28}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x75, 0xdd, 0x0, 0x7d1, 0x3306, 0x7c5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xcc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x0, 0x33, 0x2a, 0x9e}}]}}]}}, 0x0) 16.192685842s ago: executing program 3 (id=2212): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="198120000000", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 15.091816207s ago: executing program 3 (id=2215): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054001ffff7ff00000800000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000ff"], 0x38}}, 0x0) 13.935216696s ago: executing program 0 (id=2219): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x1, 0x1bf4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4229c2, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) socket$l2tp(0x2, 0x2, 0x73) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) unshare(0x8000400) close_range(r2, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x2, 0x0) unshare(0x280) r4 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x111100, 0x1, 0x2}, 0x18) openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x420002, 0x0) unshare(0x0) unshare(0x0) mq_notify(0xffffffffffffffff, 0x0) mq_notify(r3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.595709327s ago: executing program 0 (id=2220): syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a140000001000010000000000000000040000000a"], 0x28}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x5]}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r7 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r7, 0xc0104307, &(0x7f0000000080)=0x3) 13.21116856s ago: executing program 0 (id=2221): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/128, 0x80}}], 0x1, 0x30040, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x28}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x6, 0x7a, &(0x7f0000003300)=""/122, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x208400, 0x100) r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc2038, &(0x7f0000000680)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usbip_server_init(0x0) 11.697525077s ago: executing program 0 (id=2224): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x281}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x10000a006) syz_usb_disconnect(r0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x129142, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}]}, 0x18}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x8000) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000240)) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087}, 0x90) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.047904458s ago: executing program 0 (id=2227): r0 = socket$inet_sctp(0x2, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x100000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}, {0x4}]}]}, 0x7c}, 0x1, 0xba01}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) 6.911175918s ago: executing program 2 (id=2237): syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a140000001000010000000000000000040000000a"], 0x28}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd(r6, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r8 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r8, 0xc0104307, &(0x7f0000000080)=0x3) 6.705968832s ago: executing program 2 (id=2238): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4008004, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000000000500050002000000054001000600000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c000000090601030000000000000000010000062c0008800c00078005001500ff0000001c00078018000280140002400700000000000000000000000000010104000780200008800c0007800600054080000000100007800c000280080001400a01010008000940000000092c3975f6ec35cc435cc348cc821557fec76c08000000250899103e6b557595f5742fdc5228c1c22a30b38df004ca80728ae6e02404e3e924a701690932ae8a4aad70c6f997376c2049857c4e5680e99a5ea05807d5bdadcbc6bd0a50b04816cd501b0d69e237dac6fd3b2d4be1f4e35f594437ac88f1841901daea438214d630017f4ba97bac"], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) close_range(r0, r2, 0x0) 6.557747567s ago: executing program 2 (id=2239): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="198120000000", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) 6.033454901s ago: executing program 2 (id=2241): r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/128, 0x80}}], 0x1, 0x30040, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008000000075b219e8a6f8000000000000000095000000000000006bf201f8403f91af0c28b722694a7cb472eba6e732c1abdd71d88ef6c70f412c301f1808dce4e235c8de000000000000000000000000000000a1257174f37f3bc51258465ef0b23264df2f85189b3e588797204adeb1a589b80ee6d6540039735934a0ed8898102181115feb83bf12b342b6655e963cfea820004f383da89b03b567e8fa5afa0cfcefb4a2551f3257bd400aeeb426431e07b99fd69e3644b522467e58b6deeead6b9840ed19ef888ac6d214a32361e1448f5d9d93b7e5bd08ada07e248b8e452c29775b299cdc498989df8c7fcadda4ada4e22158cc2876628ba770660bda6bf3d02645b85d6628c46b5bcfa848efec39c57e98bddfc98b66c970d0cfb743845eae9f32048b3db31d0842552c6d792565f4786267abb59d8a494e80aa78d58745d6a96f1f05d716"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x28}, [@FRA_SRC={0x8, 0x2, @multicast2}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x6, 0x7a, &(0x7f0000003300)=""/122, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x208400, 0x100) r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc2038, &(0x7f0000000680)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usbip_server_init(0x0) 5.1737566s ago: executing program 2 (id=2244): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_emit_vhci(0x0, 0x22) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201"], 0xe3) socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740), 0x0, 0x1, 0x0, 0x0, r4}) 4.48383247s ago: executing program 2 (id=2247): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080), 0xc) read(r2, &(0x7f00000001c0)=""/149, 0x95) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x891a, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r3, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000940)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) 2.365733716s ago: executing program 1 (id=2250): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x3e8}}) 2.237737128s ago: executing program 1 (id=2251): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="198120000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) fallocate(r9, 0x40, 0x0, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x810, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0x3) ioctl$TUNSETLINK(r11, 0x400454cd, 0x300) write$binfmt_misc(r10, &(0x7f00000001c0)=ANY=[], 0xed) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000340)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$netlink(0x10, 0x3, 0xc) 1.882783424s ago: executing program 1 (id=2252): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000b00)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0xa1, &(0x7f0000000b80)=""/161}]}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) 1.76381567s ago: executing program 1 (id=2253): syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ac141400"/176], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a140000001000010000000000000000040000000a"], 0x28}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd(r6, &(0x7f0000000200), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r8 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r8, 0xc0104307, &(0x7f0000000080)=0x3) 1.638775657s ago: executing program 1 (id=2254): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_emit_vhci(0x0, 0x22) r0 = syz_open_dev$cec(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="2d9d7ab861bd4d304d57ab9f4ed1108b1c6e2a9dc73e476201"], 0xe3) socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740), 0x0, 0x1, 0x0, 0x0, r4}) 0s ago: executing program 1 (id=2255): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080), 0xc) read(r2, &(0x7f00000001c0)=""/149, 0x95) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x891a, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r3, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000940)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.139717][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.148821][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.164261][T16037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.173057][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.183359][T16037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.192107][T16037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.215426][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 724.228505][T16037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.241672][ T46] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 724.257106][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.286868][ T46] usb 3-1: config 0 descriptor?? [ 724.363305][ T5280] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 724.407523][ T5280] usb 1-1: device descriptor read/8, error -71 [ 724.477034][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.496170][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.534658][ T5280] usb usb1-port1: unable to enumerate USB device [ 724.581207][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.597054][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.658700][T16222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.704592][T16222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.766459][T16222] misc userio: Invalid payload size [ 724.775279][T16222] misc userio: No port type given on /dev/userio [ 724.807393][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 724.814668][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 724.840971][ T46] usb 3-1: USB disconnect, device number 77 [ 725.824257][T16238] dccp_flush_write_queue: CCID did not manage to send all packets [ 726.930507][T16258] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 727.511629][ T2584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.602146][ T58] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 727.827888][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 727.851141][ T58] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 727.873205][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.883257][ T58] usb 5-1: Product: syz [ 727.887465][ T58] usb 5-1: Manufacturer: syz [ 727.892077][ T58] usb 5-1: SerialNumber: syz [ 727.907293][T16264] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 727.948384][T16264] pim6reg0: linktype set to 768 [ 727.954718][ T58] usb 5-1: config 0 descriptor?? [ 727.985729][ T58] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 728.096619][ T2584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.210506][T16273] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 728.308030][ T945] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 728.541009][ T945] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 728.552765][ T2584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.585414][ T945] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 728.612494][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 728.625136][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 728.653330][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 728.661703][ T945] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 728.671077][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.680707][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 728.689211][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 728.696634][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 728.709866][T16274] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 728.743374][ T945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 729.071495][ T2584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.640913][ T2584] bridge_slave_1: left allmulticast mode [ 729.661466][ T2584] bridge_slave_1: left promiscuous mode [ 729.691391][ T2584] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.736205][ T2584] bridge_slave_0: left allmulticast mode [ 729.772557][ T2584] bridge_slave_0: left promiscuous mode [ 729.802724][ T2584] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.923574][ T58] gp8psk: usb in 128 operation failed. [ 729.930728][ T58] gp8psk: usb in 137 operation failed. [ 729.947291][ T58] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 729.949658][ T46] usb 3-1: USB disconnect, device number 78 [ 729.969507][ T6221] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 730.027590][ T58] dvb_usb_gp8psk 5-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 730.141039][ T58] usb 5-1: USB disconnect, device number 80 [ 730.215934][ T6221] usb 2-1: Using ep0 maxpacket: 32 [ 730.228265][ T6221] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 730.268410][ T6221] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 730.291890][ T6221] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.333224][ T6221] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.364663][ T6221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.372695][ T6221] usb 2-1: Product: syz [ 730.408793][ T6221] usb 2-1: Manufacturer: syz [ 730.428925][ T6221] usb 2-1: SerialNumber: syz [ 730.793933][ T54] Bluetooth: hci2: command tx timeout [ 731.467403][ T2584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.509588][ T2584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.551684][ T2584] bond0 (unregistering): Released all slaves [ 732.436605][T16279] chnl_net:caif_netlink_parms(): no params data found [ 732.786055][ T6221] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 732.789040][ T2584] hsr_slave_0: left promiscuous mode [ 732.808248][ T6221] usb 2-1: 2:1 : sample bitwidth 254 in over sample bytes 1 [ 732.823333][ T6221] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 732.862086][ T6221] usb 2-1: 2:1 : invalid channels 0 [ 732.873227][ T54] Bluetooth: hci2: command tx timeout [ 732.877745][ T2584] hsr_slave_1: left promiscuous mode [ 732.908480][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.943646][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.962567][ T6221] usb 2-1: USB disconnect, device number 65 [ 733.010556][ T2584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.047690][ T2584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.068975][T16280] udevd[16280]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 733.168005][ T2584] veth1_macvtap: left promiscuous mode [ 733.176073][ T2584] veth0_macvtap: left promiscuous mode [ 733.254548][ T2584] veth1_vlan: left promiscuous mode [ 733.273809][ T2584] veth0_vlan: left promiscuous mode [ 734.096098][ T5296] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 734.305786][ T5296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.335337][ T5296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.355563][ T5296] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.377848][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.415559][ T5296] usb 5-1: SerialNumber: syz [ 734.873497][ T2584] team0 (unregistering): Port device team_slave_1 removed [ 734.962455][ T54] Bluetooth: hci2: command tx timeout [ 735.010377][ T2584] team0 (unregistering): Port device team_slave_0 removed [ 735.152436][T16386] FAULT_INJECTION: forcing a failure. [ 735.152436][T16386] name failslab, interval 1, probability 0, space 0, times 0 [ 735.165158][T16386] CPU: 0 UID: 0 PID: 16386 Comm: syz.3.1978 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 735.175941][T16386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 735.186013][T16386] Call Trace: [ 735.189305][T16386] [ 735.192256][T16386] dump_stack_lvl+0x241/0x360 [ 735.196967][T16386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.202188][T16386] ? __pfx__printk+0x10/0x10 [ 735.206798][T16386] ? __pfx_lock_acquire+0x10/0x10 [ 735.211843][T16386] ? nf_ct_pernet+0x45/0x270 [ 735.216448][T16386] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 735.222454][T16386] should_fail_ex+0x3b0/0x4e0 [ 735.227175][T16386] ? __nf_conntrack_alloc+0x8f/0x380 [ 735.232566][T16386] should_failslab+0xac/0x100 [ 735.237268][T16386] ? __nf_conntrack_alloc+0x8f/0x380 [ 735.242571][T16386] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 735.247974][T16386] __nf_conntrack_alloc+0x8f/0x380 [ 735.253195][T16386] init_conntrack+0x3c3/0x1310 [ 735.257985][T16386] ? __pfx_init_conntrack+0x10/0x10 [ 735.263205][T16386] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 735.269205][T16386] ? __local_bh_enable_ip+0x168/0x200 [ 735.274611][T16386] nf_conntrack_in+0xd59/0x1880 [ 735.279516][T16386] ? __pfx_nf_conntrack_in+0x10/0x10 [ 735.284855][T16386] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 735.290327][T16386] nf_hook_slow+0xc3/0x220 [ 735.294764][T16386] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 735.300064][T16386] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 735.305281][T16386] NF_HOOK+0x29e/0x450 [ 735.309370][T16386] ? skb_orphan+0x4b/0xd0 [ 735.313720][T16386] ? NF_HOOK+0x9a/0x450 [ 735.317894][T16386] ? __pfx_NF_HOOK+0x10/0x10 [ 735.322519][T16386] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 735.327744][T16386] ? __pfx_ipv6_rcv+0x10/0x10 [ 735.332443][T16386] __netif_receive_skb+0x1ea/0x650 [ 735.337578][T16386] ? __pfx_lock_acquire+0x10/0x10 [ 735.342625][T16386] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 735.348890][T16386] ? __pfx___netif_receive_skb+0x10/0x10 [ 735.354541][T16386] ? __kasan_slab_alloc+0x66/0x80 [ 735.359596][T16386] ? read_tsc+0x9/0x20 [ 735.363695][T16386] ? timekeeping_get_ns+0x2c0/0x420 [ 735.368928][T16386] ? netif_receive_skb+0x131/0x890 [ 735.374065][T16386] ? netif_receive_skb+0x131/0x890 [ 735.379197][T16386] netif_receive_skb+0x1e8/0x890 [ 735.384156][T16386] ? tun_rx_batched+0x160/0x8f0 [ 735.389022][T16386] ? __pfx_netif_receive_skb+0x10/0x10 [ 735.394598][T16386] ? tun_rx_batched+0x160/0x8f0 [ 735.399473][T16386] tun_rx_batched+0x1b7/0x8f0 [ 735.404159][T16386] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 735.410512][T16386] ? __pfx_lock_acquire+0x10/0x10 [ 735.415554][T16386] ? __pfx_tun_rx_batched+0x10/0x10 [ 735.420788][T16386] tun_get_user+0x2f84/0x4720 [ 735.425481][T16386] ? tun_get_user+0x2a78/0x4720 [ 735.430358][T16386] ? __lock_acquire+0x137a/0x2040 [ 735.435411][T16386] ? __pfx_tun_get_user+0x10/0x10 [ 735.440470][T16386] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 735.445947][T16386] ? tun_get+0x1e/0x2f0 [ 735.450120][T16386] ? __pfx_lock_release+0x10/0x10 [ 735.455180][T16386] ? tun_get+0x1e/0x2f0 [ 735.459350][T16386] ? tun_get+0x27d/0x2f0 [ 735.463606][T16386] tun_chr_write_iter+0x113/0x1f0 [ 735.468656][T16386] vfs_write+0xa72/0xc90 [ 735.473008][T16386] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 735.478573][T16386] ? __pfx_vfs_write+0x10/0x10 [ 735.483377][T16386] ksys_write+0x1a0/0x2c0 [ 735.487733][T16386] ? __pfx_ksys_write+0x10/0x10 [ 735.492602][T16386] ? do_syscall_64+0x100/0x230 [ 735.497399][T16386] ? do_syscall_64+0xb6/0x230 [ 735.502098][T16386] do_syscall_64+0xf3/0x230 [ 735.506631][T16386] ? clear_bhb_loop+0x35/0x90 [ 735.511324][T16386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.517240][T16386] RIP: 0033:0x7f89631764df [ 735.521679][T16386] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 735.541308][T16386] RSP: 002b:00007f8963f0d010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 735.549924][T16386] RAX: ffffffffffffffda RBX: 00007f8963305f80 RCX: 00007f89631764df [ 735.557918][T16386] RDX: 0000000000000062 RSI: 00000000200003c0 RDI: 00000000000000c8 [ 735.565909][T16386] RBP: 00007f8963f0d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 735.573900][T16386] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001 [ 735.581890][T16386] R13: 000000000000000b R14: 00007f8963305f80 R15: 00007f896342fa38 [ 735.590156][T16386] [ 735.989285][T16390] binder: 16389:16390 ioctl c018620c 20000000 returned -1 [ 736.291942][T16398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.312151][T16398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.695112][T16400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.704747][T16400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.038545][ T54] Bluetooth: hci2: command tx timeout [ 737.215962][T16398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1982'. [ 737.361653][ T5296] usb 5-1: 0:2 : does not exist [ 737.395662][ T5296] usb 5-1: unit 5: unexpected type 0x03 [ 737.495585][T16279] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.504878][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.512091][T16279] bridge_slave_0: entered allmulticast mode [ 737.529679][ T5296] usb 5-1: USB disconnect, device number 81 [ 737.548565][T16279] bridge_slave_0: entered promiscuous mode [ 737.596748][T16279] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.637038][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.657999][T16279] bridge_slave_1: entered allmulticast mode [ 737.685180][T16279] bridge_slave_1: entered promiscuous mode [ 737.818786][T16279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.890794][T16279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.921435][T16280] udevd[16280]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.133325][ T5280] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 738.206276][T16279] team0: Port device team_slave_0 added [ 738.304376][ T5280] usb 3-1: device descriptor read/64, error -71 [ 738.322588][T16279] team0: Port device team_slave_1 added [ 738.457965][T16279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.505537][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.531487][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.542657][T16279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.560880][T16279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.581516][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.608047][ T5280] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 738.628824][T16279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.763239][ T5280] usb 3-1: device descriptor read/64, error -71 [ 738.859442][T16279] hsr_slave_0: entered promiscuous mode [ 738.888509][ T5280] usb usb3-port1: attempt power cycle [ 738.897764][T16279] hsr_slave_1: entered promiscuous mode [ 739.333258][ T5280] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 739.423912][ T5280] usb 3-1: device descriptor read/8, error -71 [ 739.539883][T16449] binder: 16448:16449 ioctl c018620c 20000000 returned -1 [ 739.754739][ T5280] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 739.816146][ T5280] usb 3-1: device descriptor read/8, error -71 [ 739.905906][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.956000][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.963814][ T5280] usb usb3-port1: unable to enumerate USB device [ 739.992008][T16462] tmpfs: Unknown parameter 'fd' [ 740.020784][T16462] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 740.402219][T16279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 740.431838][T16279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 740.488427][T16279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 740.509540][T16279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 740.758162][T16279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.857019][T16279] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.901844][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.909071][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.960700][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.967953][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.002335][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.076226][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.150821][T16279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.288883][T16279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.450804][T16279] veth0_vlan: entered promiscuous mode [ 741.597685][T16279] veth1_vlan: entered promiscuous mode [ 741.701324][T16279] veth0_macvtap: entered promiscuous mode [ 741.735540][T16279] veth1_macvtap: entered promiscuous mode [ 741.938112][ T2503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.027298][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.073757][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.116930][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.141487][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.183161][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.223130][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.249698][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.282949][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.317001][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.345715][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.372095][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.413174][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.456339][T16279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.659074][ T2503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.775727][T16518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.822588][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.847084][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.871065][T16518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.881895][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.907284][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.923924][T16518] misc userio: Invalid payload size [ 742.933146][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.973047][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.975434][T16518] misc userio: No port type given on /dev/userio [ 742.993551][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.023237][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.053597][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.080805][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.101246][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.121439][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.142265][T16279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.203283][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 743.212629][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 743.221765][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 743.231067][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 743.239824][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 743.247961][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 743.367853][ T2503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.465046][T16279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.488597][T16279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.498428][T16279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.511585][T16279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.645613][ T6221] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 743.707448][ T2503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.853750][ T6221] usb 5-1: Using ep0 maxpacket: 8 [ 743.873687][ T6221] usb 5-1: no configurations [ 743.889920][ T6221] usb 5-1: can't read configurations, error -22 [ 744.083252][ T6221] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 744.255906][ T2584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.315107][ T6221] usb 5-1: Using ep0 maxpacket: 8 [ 744.324786][ T6221] usb 5-1: no configurations [ 744.330423][ T2584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.332598][ T6221] usb 5-1: can't read configurations, error -22 [ 744.346643][ T6221] usb usb5-port1: attempt power cycle [ 744.389009][ T2503] bridge_slave_1: left allmulticast mode [ 744.406226][ T2503] bridge_slave_1: left promiscuous mode [ 744.412024][ T2503] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.465806][ T2503] bridge_slave_0: left allmulticast mode [ 744.492816][ T2503] bridge_slave_0: left promiscuous mode [ 744.528264][ T2503] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.754318][ T6221] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 744.819475][ T6221] usb 5-1: Using ep0 maxpacket: 8 [ 744.832047][ T6221] usb 5-1: no configurations [ 744.848503][ T6221] usb 5-1: can't read configurations, error -22 [ 744.923337][T16568] tmpfs: Unknown parameter 'fd' [ 744.950559][T16568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 745.033726][ T6221] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 745.083879][ T6221] usb 5-1: Using ep0 maxpacket: 8 [ 745.101017][ T6221] usb 5-1: no configurations [ 745.127726][ T6221] usb 5-1: can't read configurations, error -22 [ 745.163868][ T6221] usb usb5-port1: unable to enumerate USB device [ 745.277488][ T54] Bluetooth: hci1: command tx timeout [ 745.847429][ T2503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.870033][ T2503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.888077][ T2503] bond0 (unregistering): Released all slaves [ 745.985279][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.022539][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.344361][T16532] chnl_net:caif_netlink_parms(): no params data found [ 747.084143][ T2503] hsr_slave_0: left promiscuous mode [ 747.105574][ T2503] hsr_slave_1: left promiscuous mode [ 747.127350][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.167892][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.194759][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.210554][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.315774][ T2503] veth1_macvtap: left promiscuous mode [ 747.321369][ T2503] veth0_macvtap: left promiscuous mode [ 747.353337][ T54] Bluetooth: hci1: command tx timeout [ 747.377089][ T2503] veth1_vlan: left promiscuous mode [ 747.382485][ T2503] veth0_vlan: left promiscuous mode [ 747.488839][T16628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2018'. [ 747.516271][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.522594][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.776112][T16639] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 747.789484][ T54] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 747.797151][ T54] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 747.804980][ T6221] IPVS: starting estimator thread 0... [ 747.962314][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 747.973764][T16640] IPVS: using max 22 ests per chain, 52800 per kthread [ 748.030858][T16649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 748.076675][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 748.087146][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 748.100050][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 748.111539][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 748.120916][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 748.130998][T16652] tmpfs: Unknown parameter 'fd' [ 748.131088][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 748.201934][T16652] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 748.216559][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 748.285348][T16660] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2023'. [ 748.968574][ T2503] team0 (unregistering): Port device team_slave_1 removed [ 749.065738][ T2503] team0 (unregistering): Port device team_slave_0 removed [ 749.435139][ T54] Bluetooth: hci1: command tx timeout [ 749.940218][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 749.960181][T16635] IPv6: NLM_F_REPLACE set, but no existing node found! [ 749.997204][T16661] IPv6: NLM_F_REPLACE set, but no existing node found! [ 750.233605][ T54] Bluetooth: hci3: command tx timeout [ 750.298410][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.310011][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.323426][T16532] bridge_slave_0: entered allmulticast mode [ 750.330844][T16532] bridge_slave_0: entered promiscuous mode [ 750.347333][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.360120][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.367489][T16532] bridge_slave_1: entered allmulticast mode [ 750.376255][T16532] bridge_slave_1: entered promiscuous mode [ 750.555254][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.624485][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.837951][T16532] team0: Port device team_slave_0 added [ 750.862747][T16532] team0: Port device team_slave_1 added [ 751.144060][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.196280][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.305047][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.376233][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.425851][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.484426][T16684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.503188][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.513237][ T54] Bluetooth: hci1: command tx timeout [ 751.519794][T16684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.799776][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 751.814132][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 751.834350][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 751.845185][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 751.853920][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 751.864734][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 751.874811][T16532] hsr_slave_0: entered promiscuous mode [ 751.897909][T16532] hsr_slave_1: entered promiscuous mode [ 751.914642][T16532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.950418][T16532] Cannot create hsr debugfs directory [ 752.006605][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.049585][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.063537][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.075070][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.086060][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 752.094001][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.243894][ T2503] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.313696][ T54] Bluetooth: hci3: command tx timeout [ 752.565674][ T2503] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.794950][ T2503] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.873370][T16657] chnl_net:caif_netlink_parms(): no params data found [ 753.158611][ T2503] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.753674][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.772299][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.790130][T16657] bridge_slave_0: entered allmulticast mode [ 753.806730][T16657] bridge_slave_0: entered promiscuous mode [ 753.828408][T16723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.855233][T16723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.911647][T16657] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.914802][ T54] Bluetooth: hci2: command tx timeout [ 753.921792][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.943529][T16657] bridge_slave_1: entered allmulticast mode [ 753.950977][T16657] bridge_slave_1: entered promiscuous mode [ 754.154388][ T54] Bluetooth: hci4: command tx timeout [ 754.206124][T16657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.256563][T16657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.393359][ T54] Bluetooth: hci3: command tx timeout [ 754.460537][ T2503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.538866][T16688] chnl_net:caif_netlink_parms(): no params data found [ 754.701361][ T2503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.755225][T16657] team0: Port device team_slave_0 added [ 754.869421][T16690] chnl_net:caif_netlink_parms(): no params data found [ 754.947123][ T2503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.995035][T16657] team0: Port device team_slave_1 added [ 755.092331][T16738] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 755.196324][T16741] netlink: 'syz.3.2037': attribute type 4 has an invalid length. [ 755.266872][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.288570][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.300304][ T2503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.336359][T16657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.345367][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.397756][T16657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.422246][T16657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.429914][T16657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.457527][T16657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.606109][T16688] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.623366][T16688] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.630638][T16688] bridge_slave_0: entered allmulticast mode [ 755.649409][T16688] bridge_slave_0: entered promiscuous mode [ 755.733717][T16688] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.740871][T16688] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.761502][T16688] bridge_slave_1: entered allmulticast mode [ 755.785274][T16688] bridge_slave_1: entered promiscuous mode [ 755.892941][T16657] hsr_slave_0: entered promiscuous mode [ 755.900891][T16657] hsr_slave_1: entered promiscuous mode [ 755.920871][T16657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.934094][T16657] Cannot create hsr debugfs directory [ 755.994002][ T54] Bluetooth: hci2: command tx timeout [ 756.016112][T16532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 756.130915][T16688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.173722][T16688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.193288][T16532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 756.233205][ T54] Bluetooth: hci4: command tx timeout [ 756.376175][T16763] FAULT_INJECTION: forcing a failure. [ 756.376175][T16763] name failslab, interval 1, probability 0, space 0, times 0 [ 756.406767][T16763] CPU: 0 UID: 0 PID: 16763 Comm: syz.3.2038 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 756.417583][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 756.427660][T16763] Call Trace: [ 756.430962][T16763] [ 756.433911][T16763] dump_stack_lvl+0x241/0x360 [ 756.438614][T16763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.443834][T16763] ? __pfx__printk+0x10/0x10 [ 756.448452][T16763] ? ref_tracker_alloc+0x332/0x490 [ 756.453587][T16763] should_fail_ex+0x3b0/0x4e0 [ 756.458295][T16763] ? skb_clone+0x20c/0x390 [ 756.462726][T16763] should_failslab+0xac/0x100 [ 756.467422][T16763] ? skb_clone+0x20c/0x390 [ 756.471855][T16763] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 756.474321][ T54] Bluetooth: hci3: command tx timeout [ 756.477224][T16763] skb_clone+0x20c/0x390 [ 756.477254][T16763] __netlink_deliver_tap+0x3cc/0x7c0 [ 756.492137][T16763] ? netlink_deliver_tap+0x2e/0x1b0 [ 756.497354][T16763] netlink_deliver_tap+0x19d/0x1b0 [ 756.502487][T16763] netlink_unicast+0x7be/0x990 [ 756.507282][T16763] ? __pfx_netlink_unicast+0x10/0x10 [ 756.512749][T16763] ? __virt_addr_valid+0x183/0x530 [ 756.517875][T16763] ? __check_object_size+0x49c/0x900 [ 756.523172][T16763] ? bpf_lsm_netlink_send+0x9/0x10 [ 756.528297][T16763] netlink_sendmsg+0x8e4/0xcb0 [ 756.533085][T16763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.538385][T16763] ? __import_iovec+0x536/0x820 [ 756.543245][T16763] ? aa_sock_msg_perm+0x91/0x160 [ 756.548201][T16763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 756.553504][T16763] ? security_socket_sendmsg+0x87/0xb0 [ 756.558981][T16763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.564282][T16763] __sock_sendmsg+0x221/0x270 [ 756.568978][T16763] ____sys_sendmsg+0x525/0x7d0 [ 756.573762][T16763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.579082][T16763] __sys_sendmsg+0x2b0/0x3a0 [ 756.583688][T16763] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.588826][T16763] ? vfs_write+0x7c4/0xc90 [ 756.593297][T16763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 756.599645][T16763] ? do_syscall_64+0x100/0x230 [ 756.604435][T16763] ? do_syscall_64+0xb6/0x230 [ 756.609140][T16763] do_syscall_64+0xf3/0x230 [ 756.613666][T16763] ? clear_bhb_loop+0x35/0x90 [ 756.618371][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.624286][T16763] RIP: 0033:0x7f89631779f9 [ 756.628710][T16763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.648336][T16763] RSP: 002b:00007f8963f0d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.656770][T16763] RAX: ffffffffffffffda RBX: 00007f8963305f80 RCX: 00007f89631779f9 [ 756.664760][T16763] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 756.672746][T16763] RBP: 00007f8963f0d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 756.680728][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.688707][T16763] R13: 000000000000000b R14: 00007f8963305f80 R15: 00007f896342fa38 [ 756.696710][T16763] [ 756.729238][T16532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 756.757459][T16532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 756.779158][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.789813][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.809329][T16690] bridge_slave_0: entered allmulticast mode [ 756.825366][T16690] bridge_slave_0: entered promiscuous mode [ 756.908933][ T2503] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.991427][T16688] team0: Port device team_slave_0 added [ 757.141167][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.165765][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.173049][T16690] bridge_slave_1: entered allmulticast mode [ 757.219050][T16690] bridge_slave_1: entered promiscuous mode [ 757.257608][T16688] team0: Port device team_slave_1 added [ 757.350676][ T2503] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.483008][T16775] netlink: 'syz.3.2039': attribute type 3 has an invalid length. [ 757.580010][ T2503] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.634245][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.656219][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 757.726943][T16688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.737612][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.774609][T16688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.871845][ T2503] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.896995][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.915665][T16688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.931854][T16688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.977920][T16688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.073841][ T54] Bluetooth: hci2: command tx timeout [ 758.174116][T16690] team0: Port device team_slave_0 added [ 758.218116][T16688] hsr_slave_0: entered promiscuous mode [ 758.274130][T16688] hsr_slave_1: entered promiscuous mode [ 758.282388][T16688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.290840][T16688] Cannot create hsr debugfs directory [ 758.313468][ T54] Bluetooth: hci4: command tx timeout [ 758.351979][T16690] team0: Port device team_slave_1 added [ 758.585266][T16791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.587731][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.604906][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.632522][T16791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.669845][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.671579][T16791] misc userio: No port type given on /dev/userio [ 758.734022][ T2503] bridge_slave_1: left allmulticast mode [ 758.741255][ T2503] bridge_slave_1: left promiscuous mode [ 758.771678][ T2503] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.792887][ T2503] bridge_slave_0: left allmulticast mode [ 758.830496][ T2503] bridge_slave_0: left promiscuous mode [ 758.840116][ T2503] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.862488][ T2503] bridge_slave_1: left allmulticast mode [ 758.870715][ T2503] bridge_slave_1: left promiscuous mode [ 758.882875][ T2503] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.929508][ T2503] bridge_slave_0: left allmulticast mode [ 758.940703][ T2503] bridge_slave_0: left promiscuous mode [ 758.948556][ T2503] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.969426][ T2503] bridge_slave_1: left allmulticast mode [ 758.979656][ T2503] bridge_slave_1: left promiscuous mode [ 758.986376][ T2503] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.998126][ T2503] bridge_slave_0: left allmulticast mode [ 759.007726][ T2503] bridge_slave_0: left promiscuous mode [ 759.018176][ T2503] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.153712][ T54] Bluetooth: hci2: command tx timeout [ 760.393389][ T54] Bluetooth: hci4: command tx timeout [ 760.743910][ T2503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.769252][ T2503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.789587][ T2503] bond0 (unregistering): Released all slaves [ 761.036202][ T2503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.065117][ T2503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.086499][ T2503] bond0 (unregistering): Released all slaves [ 761.331132][ T2503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.362699][ T2503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.386824][ T2503] bond0 (unregistering): Released all slaves [ 761.400300][ T2503] bond1 (unregistering): Released all slaves [ 761.453602][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.460575][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.511475][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.864058][T16799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.903674][T16799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.021338][T16690] hsr_slave_0: entered promiscuous mode [ 762.038568][T16690] hsr_slave_1: entered promiscuous mode [ 762.060116][T16690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.068333][T16690] Cannot create hsr debugfs directory [ 762.292990][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.536940][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.715277][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.722447][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.936900][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.944086][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.249110][T16819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.294303][T16819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.439735][T16532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 763.454265][T16532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.713830][T16657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 763.749060][ T2503] hsr_slave_0: left promiscuous mode [ 763.769666][ T2503] hsr_slave_1: left promiscuous mode [ 763.777048][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.791907][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.800514][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.826443][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.848168][ T2503] hsr_slave_0: left promiscuous mode [ 763.863874][ T2503] hsr_slave_1: left promiscuous mode [ 763.870414][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.879602][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.888491][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.903266][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.930737][ T2503] hsr_slave_0: left promiscuous mode [ 763.945509][ T2503] hsr_slave_1: left promiscuous mode [ 763.961416][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.991227][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.024693][ T2503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.032283][ T2503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.177525][ T2503] veth1_macvtap: left promiscuous mode [ 764.193398][ T2503] veth0_macvtap: left promiscuous mode [ 764.199089][ T2503] veth1_vlan: left promiscuous mode [ 764.208254][ T2503] veth0_vlan: left promiscuous mode [ 764.224944][ T2503] veth1_macvtap: left promiscuous mode [ 764.230605][ T2503] veth0_macvtap: left promiscuous mode [ 764.243855][ T2503] veth1_vlan: left promiscuous mode [ 764.249217][ T2503] veth0_vlan: left promiscuous mode [ 764.304184][ T2503] veth1_macvtap: left promiscuous mode [ 764.310932][ T2503] veth0_macvtap: left promiscuous mode [ 764.320297][ T2503] veth1_vlan: left promiscuous mode [ 764.334900][ T2503] veth0_vlan: left promiscuous mode [ 764.406496][T16842] loop0: detected capacity change from 0 to 7 [ 764.423874][T16842] Dev loop0: unable to read RDB block 7 [ 764.430751][T16842] loop0: unable to read partition table [ 764.448203][T16842] loop0: partition table beyond EOD, truncated [ 764.460987][T16842] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 764.460987][T16842] ) failed (rc=-5) [ 764.953357][ T5227] Bluetooth: hci0: command 0x0406 tx timeout [ 765.731125][ T2503] team0 (unregistering): Port device team_slave_1 removed [ 765.815567][ T2503] team0 (unregistering): Port device team_slave_0 removed [ 765.920751][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.953483][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.479151][ T2503] team0 (unregistering): Port device team_slave_1 removed [ 767.653862][ T2503] team0 (unregistering): Port device team_slave_0 removed [ 769.394924][ T2503] team0 (unregistering): Port device team_slave_1 removed [ 769.458779][ T2503] team0 (unregistering): Port device team_slave_0 removed [ 770.082850][T16657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.100136][T16657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 770.148828][T16532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.234856][T16657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.576311][T16532] veth0_vlan: entered promiscuous mode [ 770.737602][T16690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 770.768763][T16690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 770.816329][T16532] veth1_vlan: entered promiscuous mode [ 770.830540][T16690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 770.867409][T16690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 771.007642][T16657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.070704][T16532] veth0_macvtap: entered promiscuous mode [ 771.197866][T16532] veth1_macvtap: entered promiscuous mode [ 771.220648][T16688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.263620][T16688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.290427][T16688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.346492][T16657] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.394275][T16688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.500624][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.507843][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.534920][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.542145][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.602456][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.641675][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.681582][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.703209][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.733187][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.763176][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.801908][T16532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.828534][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.840030][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.867307][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.883350][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.901836][T16532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.912705][T16532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.934341][T16532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.986086][T16532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.003662][T16532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.022579][T16532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.043643][T16532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.130548][T16657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 772.141834][T16657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 772.267790][T16907] sch_tbf: burst 1 is lower than device lo mtu (11337746) ! [ 772.458442][T16690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.609122][T16657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.683004][T16690] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.756234][T16688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.807040][ T2584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.830446][ T2584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.884259][T16688] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.923253][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.930482][ T5232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.052547][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.059761][ T5232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.096484][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.103699][ T5232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.141764][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.148935][ T5232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.283450][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.317257][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.428720][T16657] veth0_vlan: entered promiscuous mode [ 773.552306][T16657] veth1_vlan: entered promiscuous mode [ 773.699449][T16929] binder: 16928:16929 ioctl c018620c 20000000 returned -1 [ 773.807148][T16657] veth0_macvtap: entered promiscuous mode [ 773.848506][T16657] veth1_macvtap: entered promiscuous mode [ 773.870185][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.924007][T16688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.968523][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.993654][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.013471][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.033169][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.046291][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.068287][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.083421][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.109888][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.150401][T16657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.273525][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.289503][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.302085][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.323690][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.334129][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.344933][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.358080][T16657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.395624][T16657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.408583][T16657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.438791][T16690] veth0_vlan: entered promiscuous mode [ 774.461918][T16657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.471412][T16657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.481828][T16657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.501146][T16657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.546322][T16688] veth0_vlan: entered promiscuous mode [ 774.568841][T16690] veth1_vlan: entered promiscuous mode [ 774.681384][T16688] veth1_vlan: entered promiscuous mode [ 774.809327][T16690] veth0_macvtap: entered promiscuous mode [ 774.904222][T16690] veth1_macvtap: entered promiscuous mode [ 774.966001][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.020864][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.101582][T16688] veth0_macvtap: entered promiscuous mode [ 775.178312][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.191603][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.215474][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.237158][ T5276] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 775.252951][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.287261][ T5276] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 775.313380][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.363198][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.393245][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.423155][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.453148][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.484049][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.500083][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.522588][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.550352][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.690639][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.720627][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.771424][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.790873][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.808476][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.848902][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.867768][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.888501][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.922573][T16690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.968816][T16690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.996181][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.027607][T16688] veth1_macvtap: entered promiscuous mode [ 776.110689][T16690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.147197][T16690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.161491][T16690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.176192][T16690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.345271][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.386034][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.420226][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.431256][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.451770][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.483343][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.503271][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.531728][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.552195][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.573126][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.593279][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.613103][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.636903][T16688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.659429][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.681784][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.702102][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.722935][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.743544][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.763315][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.783217][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.805412][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.825699][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.853145][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.873784][T16688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.893133][T16688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.915016][T16688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.922409][T16980] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 776.928562][T16980] pim6reg0: linktype set to 768 [ 777.012554][T16688] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.035162][T16688] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.053137][T16688] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.076986][T16688] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.217628][T16990] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 777.450719][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.491741][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.605687][ T2584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.626595][ T2584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.679974][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.703500][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.798587][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.862959][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.230335][ T5280] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 778.264421][ T5280] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 779.066252][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 779.175246][T17032] binder: 17030:17032 ioctl c018620c 20000000 returned -1 [ 779.512030][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.792932][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.875604][T17057] dccp_invalid_packet: P.Data Offset(0) too small [ 780.038508][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.239124][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.584292][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 780.597133][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 780.620455][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 780.664830][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 780.707699][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 780.715286][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 780.771780][ T52] bridge_slave_1: left allmulticast mode [ 780.780496][ T52] bridge_slave_1: left promiscuous mode [ 780.791774][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.820755][ T52] bridge_slave_0: left allmulticast mode [ 780.832548][ T52] bridge_slave_0: left promiscuous mode [ 780.843450][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.688727][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 781.699525][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 781.709715][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 781.737305][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 781.750466][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 781.760137][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 782.339831][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.357255][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.380925][ T52] bond0 (unregistering): Released all slaves [ 782.402374][T17094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.447547][T17067] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 782.458336][T17094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.571474][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.622960][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.799254][ T54] Bluetooth: hci3: command tx timeout [ 782.863697][T17101] tipc: Started in network mode [ 782.868618][T17101] tipc: Node identity ac14140f, cluster identity 4711 [ 782.882844][T17101] tipc: New replicast peer: 255.255.255.255 [ 782.895071][T17101] tipc: Enabled bearer , priority 10 [ 782.933268][ T5296] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 783.163411][ T5296] usb 2-1: Using ep0 maxpacket: 8 [ 783.170639][ T5296] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 783.228033][ T5296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 783.231585][T17103] binder: 17102:17103 ioctl c018620c 20000000 returned -1 [ 783.255845][ T5296] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 783.274121][ T52] hsr_slave_0: left promiscuous mode [ 783.308779][ T5296] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.328933][ T52] hsr_slave_1: left promiscuous mode [ 783.343362][ T5296] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.352673][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.352758][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.372603][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.386752][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.405154][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.511808][ T52] veth1_macvtap: left promiscuous mode [ 783.545921][ T52] veth0_macvtap: left promiscuous mode [ 783.554267][ T52] veth1_vlan: left promiscuous mode [ 783.570794][ T52] veth0_vlan: left promiscuous mode [ 783.607829][ T5296] usb 2-1: GET_CAPABILITIES returned 0 [ 783.665329][ T5296] usbtmc 2-1:16.0: can't read capabilities [ 783.833372][ T54] Bluetooth: hci2: command tx timeout [ 784.017637][ T5296] tipc: Node number set to 2886997007 [ 784.114431][ T5279] usb 2-1: USB disconnect, device number 67 [ 784.748018][T17125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2094'. [ 784.887549][ T54] Bluetooth: hci3: command tx timeout [ 784.955768][T17127] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 784.963920][ T46] IPVS: starting estimator thread 0... [ 785.008582][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'. [ 785.049668][ T52] team0 (unregistering): Port device team_slave_1 removed [ 785.063266][T17128] IPVS: using max 18 ests per chain, 43200 per kthread [ 785.085922][T17130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2094'. [ 785.181329][ T52] team0 (unregistering): Port device team_slave_0 removed [ 785.917679][ T54] Bluetooth: hci2: command tx timeout [ 786.067526][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 786.137547][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 786.153608][T17126] IPv6: NLM_F_REPLACE set, but no existing node found! [ 786.569790][T17090] chnl_net:caif_netlink_parms(): no params data found [ 786.642140][T17063] chnl_net:caif_netlink_parms(): no params data found [ 786.953792][ T54] Bluetooth: hci3: command tx timeout [ 787.494156][T17063] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.501316][T17063] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.525377][T17063] bridge_slave_0: entered allmulticast mode [ 787.534670][T17063] bridge_slave_0: entered promiscuous mode [ 787.563444][T17063] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.574073][T17063] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.585286][T17063] bridge_slave_1: entered allmulticast mode [ 787.593039][T17063] bridge_slave_1: entered promiscuous mode [ 787.636351][T17170] sch_tbf: burst 1 is lower than device lo mtu (11337746) ! [ 787.644794][T17090] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.652151][T17171] binder: 17169:17171 ioctl c018620c 20000000 returned -1 [ 787.658458][T17090] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.678925][T17090] bridge_slave_0: entered allmulticast mode [ 787.713249][T17090] bridge_slave_0: entered promiscuous mode [ 787.797556][T17090] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.807374][T17090] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.837593][T17090] bridge_slave_1: entered allmulticast mode [ 787.864677][T17090] bridge_slave_1: entered promiscuous mode [ 787.940174][T17063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.004212][ T54] Bluetooth: hci2: command tx timeout [ 788.070495][T17090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.195565][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.271830][T17063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.409587][T17190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2103'. [ 788.432726][T17090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.610244][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.745979][T17063] team0: Port device team_slave_0 added [ 788.768037][T17063] team0: Port device team_slave_1 added [ 788.822859][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.903031][T17090] team0: Port device team_slave_0 added [ 789.033514][ T54] Bluetooth: hci3: command tx timeout [ 789.095520][T17063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.102493][T17063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.128448][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.186172][T17063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.306560][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.348932][T17090] team0: Port device team_slave_1 added [ 789.421966][T17063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.429292][T17063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.455223][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.464008][T17063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.522783][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 789.537392][T17090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.553285][ T5296] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 789.561056][T17090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.603154][T17090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.625565][T17090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.632539][T17090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.658530][ C1] vkms_vblank_simulate: vblank timer overrun [ 789.677147][T17090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.711428][T17063] hsr_slave_0: entered promiscuous mode [ 789.720302][T17205] binder: 17204:17205 ioctl c018620c 20000000 returned -1 [ 789.763211][ T5296] usb 1-1: Using ep0 maxpacket: 8 [ 789.776483][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.801271][T17063] hsr_slave_1: entered promiscuous mode [ 789.810499][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.843665][ T5296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 789.893225][ T5296] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 789.902311][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.937681][ T5296] usb 1-1: config 0 descriptor?? [ 790.083915][ T54] Bluetooth: hci2: command tx timeout [ 790.166689][T17090] hsr_slave_0: entered promiscuous mode [ 790.187114][T17090] hsr_slave_1: entered promiscuous mode [ 790.204192][T17090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.222131][T17090] Cannot create hsr debugfs directory [ 790.721852][ T5296] usbhid 1-1:0.0: can't add hid device: -71 [ 790.729928][ T52] bridge_slave_1: left allmulticast mode [ 790.750373][ T5296] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 790.758958][ T52] bridge_slave_1: left promiscuous mode [ 790.774206][ T5296] usb 1-1: USB disconnect, device number 87 [ 790.784564][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.814546][ T52] bridge_slave_0: left allmulticast mode [ 790.820322][ T52] bridge_slave_0: left promiscuous mode [ 790.843522][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.103000][T17235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2112'. [ 791.663200][ T5296] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 791.760683][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.801730][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.826401][ T52] bond0 (unregistering): Released all slaves [ 791.865272][ T5296] usb 2-1: config 0 has no interfaces? [ 791.871289][ T5296] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 791.904081][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.967149][ T5296] usb 2-1: config 0 descriptor?? [ 792.260204][ T5280] usb 2-1: USB disconnect, device number 68 [ 792.603508][T17252] binder: 17251:17252 ioctl c018620c 20000000 returned -1 [ 792.831849][ T52] hsr_slave_0: left promiscuous mode [ 792.846553][ T52] hsr_slave_1: left promiscuous mode [ 792.872430][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.907071][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.925654][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.933645][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.009313][ T52] veth1_macvtap: left promiscuous mode [ 793.018686][ T52] veth0_macvtap: left promiscuous mode [ 793.027272][ T52] veth1_vlan: left promiscuous mode [ 793.032659][ T52] veth0_vlan: left promiscuous mode [ 793.591334][ T5277] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 793.828844][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 793.845113][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.871588][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.903242][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.936389][T17276] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2124'. [ 793.967151][ T5277] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 794.034726][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.085873][ T5277] usb 2-1: config 0 descriptor?? [ 794.437665][ T52] team0 (unregistering): Port device team_slave_1 removed [ 794.614302][ T52] team0 (unregistering): Port device team_slave_0 removed [ 795.075625][T17286] binder: 17285:17286 ioctl c018620c 20000000 returned -1 [ 796.029106][ T5277] usbhid 2-1:0.0: can't add hid device: -71 [ 796.049101][ T5277] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 796.099335][ T5277] usb 2-1: USB disconnect, device number 69 [ 796.367072][T17063] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 796.445168][T17063] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 796.478948][T17063] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 796.517563][T17063] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 796.942872][T17063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.007809][T17063] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.033375][ T5280] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 797.112884][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.120132][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.175792][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.182884][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.253330][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 797.263783][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.294492][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.338526][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 797.354009][T17090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 797.370831][ T5280] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 797.392245][T17090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 797.405340][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.426407][ T5280] usb 2-1: config 0 descriptor?? [ 797.465530][T17090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 797.475197][ T5277] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 797.477160][T17090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 797.546788][T17063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.705276][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.730576][T17063] veth0_vlan: entered promiscuous mode [ 797.767137][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.806997][T17063] veth1_vlan: entered promiscuous mode [ 797.809709][ T5277] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 797.855140][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.892514][ T5277] usb 1-1: config 0 descriptor?? [ 797.942535][T17329] binder: 17326:17329 ioctl c018620c 20000000 returned -1 [ 798.015514][T17090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.028885][ T5280] usbhid 2-1:0.0: can't add hid device: -71 [ 798.055827][T17063] veth0_macvtap: entered promiscuous mode [ 798.063347][ T5280] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 798.093691][ T5280] usb 2-1: USB disconnect, device number 70 [ 798.112751][T17063] veth1_macvtap: entered promiscuous mode [ 798.171058][T17090] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.229510][ T1851] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.236711][ T1851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.255330][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.267306][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.277244][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.288158][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.298095][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.328319][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.348583][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.366223][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.382956][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.399812][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.421719][ T5277] steelseries 0003:1038:12B6.0031: item fetching failed at offset 6/7 [ 798.422154][T17063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.460356][ T5277] steelseries 0003:1038:12B6.0031: probe with driver steelseries failed with error -22 [ 798.460455][ T1851] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.477268][ T1851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.523243][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.544796][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.580645][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.592153][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.623477][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.643158][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.657660][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.681485][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.701967][T17063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.733980][ T5279] usb 1-1: USB disconnect, device number 88 [ 798.762155][T17063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.789220][T17063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.837633][T17063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.852053][T17063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.872705][T17063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.894442][T17063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.949809][T17090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.090828][T17343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2139'. [ 799.118226][T17090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.187326][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.219126][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.319604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.349073][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.370158][T17090] veth0_vlan: entered promiscuous mode [ 799.405558][T17090] veth1_vlan: entered promiscuous mode [ 799.451665][T17090] veth0_macvtap: entered promiscuous mode [ 799.517351][T17090] veth1_macvtap: entered promiscuous mode [ 799.632646][ T1851] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 799.658652][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.712266][ T1851] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 799.739320][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.773909][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.806777][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.826715][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.883295][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.906884][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.938435][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.941754][T17362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.954330][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.977954][T17363] FAULT_INJECTION: forcing a failure. [ 799.977954][T17363] name failslab, interval 1, probability 0, space 0, times 0 [ 799.989858][T17362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.012508][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.025243][T17363] CPU: 1 UID: 0 PID: 17363 Comm: syz.0.2141 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 800.036032][T17363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 800.046188][T17363] Call Trace: [ 800.049481][T17363] [ 800.052425][T17363] dump_stack_lvl+0x241/0x360 [ 800.057131][T17363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.062536][T17363] ? __pfx__printk+0x10/0x10 [ 800.067160][T17363] should_fail_ex+0x3b0/0x4e0 [ 800.071864][T17363] ? dst_alloc+0x12b/0x190 [ 800.076293][T17363] should_failslab+0xac/0x100 [ 800.080989][T17363] ? dst_alloc+0x12b/0x190 [ 800.085424][T17363] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 800.090821][T17363] dst_alloc+0x12b/0x190 [ 800.095087][T17363] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 800.101193][T17363] ip_route_output_key_hash+0x193/0x2b0 [ 800.106755][T17363] ? irqentry_exit+0x63/0x90 [ 800.111370][T17363] ? ip_route_output_key_hash+0xdf/0x2b0 [ 800.117028][T17363] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 800.123121][T17363] ? __ipv6_addr_type+0x1d8/0x2f0 [ 800.128162][T17363] ? __ip4_datagram_connect+0x72/0x1260 [ 800.133731][T17363] __ip4_datagram_connect+0x8c5/0x1260 [ 800.139313][T17363] __ip6_datagram_connect+0x194/0x1230 [ 800.144801][T17363] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 800.150708][T17363] ? ip6_datagram_connect_v6_only+0x55/0xa0 [ 800.156625][T17363] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 800.162361][T17363] ? do_raw_spin_unlock+0x13c/0x8b0 [ 800.167587][T17363] ip6_datagram_connect_v6_only+0x63/0xa0 [ 800.173328][T17363] __sys_connect+0x2df/0x310 [ 800.177943][T17363] ? __pfx___sys_connect+0x10/0x10 [ 800.183088][T17363] __x64_sys_connect+0x7a/0x90 [ 800.187876][T17363] do_syscall_64+0xf3/0x230 [ 800.192405][T17363] ? clear_bhb_loop+0x35/0x90 [ 800.197104][T17363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.203020][T17363] RIP: 0033:0x7fbbfa7779f9 [ 800.207451][T17363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.227078][T17363] RSP: 002b:00007fbbfa1bd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 800.233620][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.235494][T17363] RAX: ffffffffffffffda RBX: 00007fbbfa906130 RCX: 00007fbbfa7779f9 [ 800.249906][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.253833][T17363] RDX: 000000000000001c RSI: 0000000020000040 RDI: 000000000000000c [ 800.253851][T17363] RBP: 00007fbbfa1bd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 800.253863][T17363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.253875][T17363] R13: 000000000000006e R14: 00007fbbfa906130 R15: 00007fbbfaa2fa38 [ 800.253905][T17363] [ 800.297103][T17090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.298598][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.400130][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.414528][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.443134][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.470404][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.500405][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.527854][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.551663][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.580964][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.601740][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.624530][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.647809][T17090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.677473][T17090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.705706][T17090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.758702][T17090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.792872][T17090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.821440][T17090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.853219][T17090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.859282][T17383] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2145'. [ 801.308806][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.357724][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.469869][ T29] audit: type=1326 audit(1722657133.581:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17398 comm="syz.2.2150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1c6f779f9 code=0x0 [ 801.525681][T17397] ptrace attach of "./syz-executor exec"[17399] was attempted by ""[17397] [ 801.542534][ T2584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.573876][ T1851] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 801.585296][ T2584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.682803][T17408] dccp_invalid_packet: P.Data Offset(0) too small [ 801.823339][ T6221] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 801.843497][ T1851] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 801.914711][ T1851] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 801.961710][ T1851] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.032472][ T1851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.072778][T17395] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 802.116320][ T6221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.130265][ T1851] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.169799][ T6221] usb 3-1: New USB device found, idVendor=22b8, idProduct=4b48, bcdDevice=3f.f0 [ 802.199973][ T6221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.221174][T17419] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2151'. [ 802.248735][ T6221] usb 3-1: Product: syz [ 802.272512][ T6221] usb 3-1: Manufacturer: syz [ 802.288429][ T6221] usb 3-1: SerialNumber: syz [ 802.415169][ T5232] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 802.430028][ T5232] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 802.560785][T17406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.594330][T17406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.787278][ T5232] usb 2-1: USB disconnect, device number 71 [ 803.450264][T17451] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2157'. [ 803.700149][ T5277] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 803.946573][ T5277] usb 1-1: unable to get BOS descriptor or descriptor too short [ 803.986885][ T5277] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 804.036941][ T5277] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 804.078880][ T5277] usb 1-1: config 1 has no interface number 1 [ 804.100260][ T5277] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 804.138547][ T5277] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 804.217387][ T5277] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 804.272541][ T5277] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 804.283248][ T5276] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 804.345110][ T5277] usb 1-1: string descriptor 0 read error: -22 [ 804.362113][ T5277] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 804.390349][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.424229][ T5277] usb 1-1: low speed audio streaming not supported [ 804.504529][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 804.509640][ T6221] qmi_wwan 3-1:1.0: skipping garbage [ 804.533870][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.538816][ T6221] qmi_wwan 3-1:1.0: probe with driver qmi_wwan failed with error -22 [ 804.562057][T17467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.576852][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.631541][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.673072][ T6221] usb 3-1: USB disconnect, device number 83 [ 804.711490][T17467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.724304][ T5276] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 804.733024][ T5277] usb 1-1: USB disconnect, device number 89 [ 804.771022][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.857215][ T5276] usb 2-1: config 0 descriptor?? [ 805.226264][T17482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2164'. [ 805.316471][ T5276] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 805.354881][ T5276] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 805.443367][ T5276] hid-picolcd 0003:04D8:C002.0034: No report with id 0x11 found [ 805.603742][ T5276] usb 2-1: USB disconnect, device number 72 [ 805.880784][ T5232] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 805.928364][ T5232] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 806.443681][T17514] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2169'. [ 806.769462][T17532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2174'. [ 807.360740][T17551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2177'. [ 808.093128][ T5277] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 808.305804][ T5276] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 808.333149][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 808.349798][ T5276] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 808.355389][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.436738][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.496946][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.571693][ T5277] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 808.615780][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.649601][ T5277] usb 3-1: config 0 descriptor?? [ 808.713940][ T5232] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 808.919284][ T5232] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 808.949002][ T5232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.972768][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.981077][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.990987][ T5232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 809.001269][ T5232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.023660][ T5232] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 809.032923][ T5232] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 809.061286][ T5232] usb 1-1: Product: syz [ 809.072457][ T5232] usb 1-1: Manufacturer: syz [ 809.094611][ T5277] hid-picolcd 0003:04D8:C002.0037: unknown main item tag 0x0 [ 809.100419][ T5232] cdc_wdm 1-1:1.0: skipping garbage [ 809.125947][ T5232] cdc_wdm 1-1:1.0: skipping garbage [ 809.131383][ T5277] hid-picolcd 0003:04D8:C002.0037: unknown main item tag 0x0 [ 809.143394][ T5232] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 809.210799][ T5232] cdc_wdm 1-1:1.0: Unknown control protocol [ 809.228187][T17596] netlink: 832 bytes leftover after parsing attributes in process `syz.3.2191'. [ 809.244398][ T5277] hid-picolcd 0003:04D8:C002.0037: No report with id 0x11 found [ 809.413378][T17600] tmpfs: Unknown parameter 'fd' [ 809.432316][ T5276] usb 3-1: USB disconnect, device number 84 [ 809.472932][T17600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 809.499566][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.506215][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.512485][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.519186][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.525467][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.532083][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.538368][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.544949][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.551199][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.557792][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.564019][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.570593][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.576846][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.583424][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.589671][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.596248][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.602500][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.609087][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.615372][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 809.621954][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 809.659750][ T5277] usb 1-1: USB disconnect, device number 90 [ 809.659866][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 810.303353][T17609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2195'. [ 810.755781][ T5232] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 810.800754][ T5232] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 811.040282][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.345979][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.491814][T17635] tmpfs: Unknown parameter 'fd' [ 811.510765][T17635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 811.551116][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.570825][ T5277] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 811.667434][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.785075][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 811.790612][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 811.802338][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 811.812474][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.827243][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 811.834965][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.845443][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.860270][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 811.867754][ T5277] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 811.877306][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.888421][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 811.896443][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 811.904348][ T29] audit: type=1326 audit(1722657144.011:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17639 comm="syz.0.2207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbfa7779f9 code=0x0 [ 811.929617][ T5277] usb 3-1: config 0 descriptor?? [ 811.974689][T17641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2208'. [ 812.093507][ T63] bridge_slave_1: left allmulticast mode [ 812.117577][ T63] bridge_slave_1: left promiscuous mode [ 812.132531][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.170208][ T63] bridge_slave_0: left allmulticast mode [ 812.184321][ T63] bridge_slave_0: left promiscuous mode [ 812.200478][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.293434][ T6221] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 812.366432][ T5277] hid-picolcd 0003:04D8:C002.0039: unknown main item tag 0x0 [ 812.408293][ T5277] hid-picolcd 0003:04D8:C002.0039: unknown main item tag 0x0 [ 812.495704][ T5277] hid-picolcd 0003:04D8:C002.0039: No report with id 0x11 found [ 812.532667][ T6221] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 812.550106][ T6221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.596017][ T6221] usb 1-1: config 0 descriptor?? [ 812.622620][ T6221] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 813.020059][ T6221] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 813.122701][T17666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.278299][T17643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.311927][T17643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.457886][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.474419][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.488118][ T63] bond0 (unregistering): Released all slaves [ 813.538958][ T5277] usb 3-1: USB disconnect, device number 85 [ 813.993270][ T5227] Bluetooth: hci2: command tx timeout [ 814.078257][ T6221] gspca_cpia1: usb_control_msg 01, error -110 [ 814.128205][ T6221] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 814.365377][ T63] hsr_slave_0: left promiscuous mode [ 814.441981][ T63] hsr_slave_1: left promiscuous mode [ 814.473314][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.492969][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.518358][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.571132][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.676766][ T63] veth1_macvtap: left promiscuous mode [ 814.691326][ T63] veth0_macvtap: left promiscuous mode [ 814.706416][T17681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2218'. [ 814.712562][ T63] veth1_vlan: left promiscuous mode [ 814.746212][ T63] veth0_vlan: left promiscuous mode [ 814.984302][ T6221] usb 1-1: USB disconnect, device number 91 [ 815.390769][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 815.402061][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 815.421105][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 815.422098][T17695] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2220'. [ 815.447314][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 815.481474][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 815.496916][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 815.956011][T17702] tmpfs: Unknown parameter 'fd' [ 815.974582][T17702] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 816.073221][ T5227] Bluetooth: hci2: command tx timeout [ 816.406836][ T63] team0 (unregistering): Port device team_slave_1 removed [ 816.465351][ T63] team0 (unregistering): Port device team_slave_0 removed [ 817.355049][T17708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 817.593592][ T5227] Bluetooth: hci5: command tx timeout [ 817.768054][T17642] chnl_net:caif_netlink_parms(): no params data found [ 818.153290][ T5227] Bluetooth: hci2: command tx timeout [ 818.183210][ T5276] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 818.433118][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 818.456863][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.495192][T17642] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.497911][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.523236][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.543525][T17642] bridge_slave_0: entered allmulticast mode [ 818.557966][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.568033][T17642] bridge_slave_0: entered promiscuous mode [ 818.587819][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.601662][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.612052][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.619964][ T5276] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 818.624869][T17642] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.637054][T17642] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.645480][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.674960][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.675276][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 818.683337][T17642] bridge_slave_1: entered allmulticast mode [ 818.696254][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.705474][ T5276] usb 3-1: config 0 descriptor?? [ 818.724739][T17642] bridge_slave_1: entered promiscuous mode [ 818.881120][T17742] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2229'. [ 818.946063][T17697] chnl_net:caif_netlink_parms(): no params data found [ 818.975503][T17642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.017289][T17642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.089528][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2230'. [ 819.125030][ T5276] hid-picolcd 0003:04D8:C002.003A: unknown main item tag 0x0 [ 819.143154][ T5276] hid-picolcd 0003:04D8:C002.003A: unknown main item tag 0x0 [ 819.191699][T17642] team0: Port device team_slave_0 added [ 819.231658][ T5276] hid-picolcd 0003:04D8:C002.003A: No report with id 0x11 found [ 819.259629][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.375995][T17642] team0: Port device team_slave_1 added [ 819.602829][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.633569][ T6221] usb 3-1: USB disconnect, device number 86 [ 819.673767][ T54] Bluetooth: hci5: command tx timeout [ 819.681808][T17642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.691969][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.718724][T17642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.835281][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.885116][T17642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.892101][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.962120][T17642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.008913][T17697] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.018908][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.030189][T17697] bridge_slave_0: entered allmulticast mode [ 820.047581][T17697] bridge_slave_0: entered promiscuous mode [ 820.101542][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.172674][T17697] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.209918][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.233208][ T54] Bluetooth: hci2: command tx timeout [ 820.243658][T17697] bridge_slave_1: entered allmulticast mode [ 820.250998][T17697] bridge_slave_1: entered promiscuous mode [ 820.388599][T17642] hsr_slave_0: entered promiscuous mode [ 820.423657][T17642] hsr_slave_1: entered promiscuous mode [ 820.438580][T17642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.453411][T17642] Cannot create hsr debugfs directory [ 820.543629][ T5276] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 820.607728][T17697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.646478][T17697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.765920][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 820.774970][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.796869][ T54] Bluetooth: hci4: command tx timeout [ 820.802911][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.813603][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.833169][ T5276] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 820.843576][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.874110][ T5276] usb 3-1: config 0 descriptor?? [ 820.881098][T17777] dccp_invalid_packet: P.Data Offset(0) too small [ 821.226974][T17697] team0: Port device team_slave_0 added [ 821.258841][T17697] team0: Port device team_slave_1 added [ 821.458340][ T5276] usbhid 3-1:0.0: can't add hid device: -71 [ 821.471846][ T5276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 821.520985][ T5276] usb 3-1: USB disconnect, device number 87 [ 821.673695][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.753329][ T54] Bluetooth: hci5: command tx timeout [ 821.763346][T17740] chnl_net:caif_netlink_parms(): no params data found [ 821.792341][T17697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.810795][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.836750][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.858438][T17697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.969545][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.082726][T17697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.100121][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.104245][T17789] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2237'. [ 822.126074][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.197261][T17697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.281472][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2238'. [ 822.415573][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.619626][T17798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2240'. [ 822.815511][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.873170][ T54] Bluetooth: hci4: command tx timeout [ 823.046003][T17810] tmpfs: Unknown parameter 'fd' [ 823.090979][T17810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 823.244917][T17818] dccp_invalid_packet: P.Data Offset(0) too small [ 823.260079][T17697] hsr_slave_0: entered promiscuous mode [ 823.306268][T17697] hsr_slave_1: entered promiscuous mode [ 823.340475][T17697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.402775][T17697] Cannot create hsr debugfs directory [ 823.641894][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.663561][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.684817][T17740] bridge_slave_0: entered allmulticast mode [ 823.718355][T17740] bridge_slave_0: entered promiscuous mode [ 823.833234][ T54] Bluetooth: hci5: command tx timeout [ 823.956776][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.995193][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.014471][T17740] bridge_slave_1: entered allmulticast mode [ 824.022953][T17740] bridge_slave_1: entered promiscuous mode [ 824.198971][T17828] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2245'. [ 824.409697][T17831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2246'. [ 824.509010][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.597880][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.628892][ T63] bridge_slave_1: left allmulticast mode [ 824.643232][ T63] bridge_slave_1: left promiscuous mode [ 824.649013][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.714377][ T63] bridge_slave_0: left allmulticast mode [ 824.720072][ T63] bridge_slave_0: left promiscuous mode [ 824.738995][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.834884][ T63] bridge_slave_1: left allmulticast mode [ 824.840579][ T63] bridge_slave_1: left promiscuous mode [ 824.856735][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.875701][ T63] bridge_slave_0: left allmulticast mode [ 824.883470][ T63] bridge_slave_0: left promiscuous mode [ 824.897056][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.953721][ T54] Bluetooth: hci4: command tx timeout [ 825.208122][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 825.219486][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 825.245951][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 825.266207][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 825.275662][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 825.303017][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 826.207214][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.219394][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.232608][ T63] bond0 (unregistering): Released all slaves [ 826.397149][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.409152][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.420566][ T63] bond0 (unregistering): Released all slaves [ 826.732493][T17740] team0: Port device team_slave_0 added [ 826.751893][ T63] tipc: Disabling bearer [ 826.762017][ T63] tipc: Left network mode [ 826.795666][T17740] team0: Port device team_slave_1 added [ 826.802191][T17842] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 826.812957][T17842] pim6reg0: linktype set to 768 [ 826.928935][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.936409][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.964617][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.033284][ T54] Bluetooth: hci4: command tx timeout [ 827.108891][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.123080][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.166382][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.172816][T17848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2253'. [ 827.364823][T17740] hsr_slave_0: entered promiscuous mode [ 827.381721][T17740] hsr_slave_1: entered promiscuous mode [ 827.392970][T17740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.411653][T17740] Cannot create hsr debugfs directory [ 827.433316][ T54] Bluetooth: hci3: command tx timeout [ 827.593333][ T945] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 827.658628][T17642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 827.691086][T17642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 827.734138][T17642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 827.758769][T17642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 827.783716][ T945] usb 2-1: Using ep0 maxpacket: 16 [ 827.791078][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.802179][ T945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.853010][ T945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 827.877081][ T945] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 827.892891][ T945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.928634][ T945] usb 2-1: config 0 descriptor?? [ 828.122540][ T63] hsr_slave_0: left promiscuous mode [ 828.157367][ T63] hsr_slave_1: left promiscuous mode [ 828.177775][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.213630][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.240084][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.260135][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.287043][ T63] hsr_slave_0: left promiscuous mode [ 828.304142][ T63] hsr_slave_1: left promiscuous mode [ 828.316063][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.327604][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.346044][ T945] usbhid 2-1:0.0: can't add hid device: -71 [ 828.352080][ T945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 828.360987][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.380985][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.389153][ T945] usb 2-1: USB disconnect, device number 73 [ 828.501473][ T63] veth1_macvtap: left promiscuous mode [ 828.511987][ T63] veth0_macvtap: left promiscuous mode [ 828.517765][ T63] veth1_vlan: left promiscuous mode [ 828.523674][ T63] veth0_vlan: left promiscuous mode [ 828.540294][ T63] veth1_macvtap: left promiscuous mode [ 828.553320][ T63] veth0_macvtap: left promiscuous mode [ 828.559131][ T63] veth1_vlan: left promiscuous mode [ 828.573277][ T63] veth0_vlan: left promiscuous mode [ 829.434445][ T30] INFO: task syz.3.1832:15403 blocked for more than 143 seconds. [ 829.444585][ T30] Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 829.454436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 829.463539][ T30] task:syz.3.1832 state:D stack:24880 pid:15403 tgid:15402 ppid:15042 flags:0x00024006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 829.483448][ T30] Call Trace: [ 829.487297][ T30] [ 829.494434][ T30] __schedule+0x1800/0x4a60 [ 829.505812][ T30] ? __pfx___schedule+0x10/0x10 [ 829.513253][ T54] Bluetooth: hci3: command tx timeout [ 829.593085][ T30] ? __pfx_lock_release+0x10/0x10 [ 829.598230][ T30] ? schedule+0x90/0x320 [ 829.612874][ T30] schedule+0x14b/0x320 [ 829.617377][ T30] schedule_timeout+0xb0/0x310 [ 829.622171][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 829.648484][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 829.654791][ T30] ? wait_for_completion+0x2fe/0x620 [ 829.660120][ T30] ? wait_for_completion+0x2fe/0x620 [ 829.692968][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 829.699508][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 829.705840][ T30] ? wait_for_completion+0x2fe/0x620 [ 829.711170][ T30] wait_for_completion+0x355/0x620 [ 829.716472][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 829.722146][ T30] ? io_wq_worker_wake+0x90/0xc0 [ 829.727432][ T30] ? io_wq_put_and_exit+0x140/0x720 [ 829.732700][ T30] io_wq_put_and_exit+0x344/0x720 [ 829.738242][ T30] ? io_wq_put_and_exit+0x1b1/0x720 [ 829.743707][ T30] ? __pfx_xa_find_after+0x10/0x10 [ 829.748886][ T30] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 829.755032][ T30] ? kfree+0x149/0x360 [ 829.759135][ T30] io_uring_clean_tctx+0x168/0x1e0 [ 829.764803][ T30] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 829.770474][ T30] ? io_uring_drop_tctx_refs+0x114/0x1b0 [ 829.776586][ T30] io_uring_cancel_generic+0x76a/0x820 [ 829.782111][ T30] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 829.788806][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 829.795236][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 829.801346][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 829.808893][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 829.814789][ T30] do_exit+0x6a8/0x27f0 [ 829.818985][ T30] ? __pfx_do_exit+0x10/0x10 [ 829.824276][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 829.829718][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 829.836395][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 829.842752][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 829.850042][ T30] do_group_exit+0x207/0x2c0 [ 829.863067][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 829.868299][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 829.883757][ T30] get_signal+0x16a1/0x1740 [ 829.888320][ T30] ? __pfx_get_signal+0x10/0x10 [ 829.903083][ T30] arch_do_signal_or_restart+0x96/0x860 [ 829.910116][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 829.930265][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 829.936660][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 829.942418][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 829.958452][ T30] do_syscall_64+0x100/0x230 [ 829.968699][ T30] ? clear_bhb_loop+0x35/0x90 [ 829.979294][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.989994][ T30] RIP: 0033:0x7f1cf29775fb [ 829.994763][ T30] RSP: 002b:00007f1cf374bf20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.010736][ T30] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f1cf29775fb [ 830.023101][ T30] RDX: 00007f1cf374cff0 RSI: 0000000080085502 RDI: 0000000000000007 [ 830.031142][ T30] RBP: 00007f1cf374cff0 R08: 0000000000000080 R09: 00007f1cf374bfe8 [ 830.051186][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 830.059480][ T30] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f1cf29eef29 [ 830.073625][ T30] [ 830.076739][ T30] [ 830.076739][ T30] Showing all locks held in the system: [ 830.098405][ T30] 1 lock held by khungtaskd/30: [ 830.103622][ T30] #0: ffffffff8e9377e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 830.115084][ T30] 5 locks held by kworker/u8:4/63: [ 830.120218][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 830.131220][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 830.142188][ T30] #2: ffffffff8fc738d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 830.152919][ T30] #3: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 830.163413][ T30] #4: ffffffff8e93cbb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 830.174732][ T30] 3 locks held by kworker/u8:10/2584: [ 830.180152][ T30] #0: ffff88802a2ec948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 830.192507][ T30] #1: ffffc90009cf7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 830.205886][ T30] #2: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 830.216641][ T30] 1 lock held by dhcpcd/4897: [ 830.221342][ T30] #0: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 830.242548][ T30] 2 locks held by getty/4985: [ 830.250256][ T30] #0: ffff88802b2ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 830.269819][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 830.280606][ T30] 3 locks held by kworker/1:7/5296: [ 830.293150][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 830.313068][ T30] #1: ffffc900038afd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 830.326183][ T30] #2: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 830.335557][ T30] 1 lock held by iou-wrk-15403/15404: [ 830.340943][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.351657][ T30] 1 lock held by iou-wrk-15403/15406: [ 830.363066][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.383360][ T30] 1 lock held by iou-wrk-15403/15407: [ 830.388757][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.410692][ T30] 1 lock held by iou-wrk-15403/15408: [ 830.418803][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.430987][ T30] 1 lock held by iou-wrk-15403/15409: [ 830.436871][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.447361][ T30] 1 lock held by iou-wrk-15403/15410: [ 830.452747][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.463496][ T30] 1 lock held by iou-wrk-15403/15411: [ 830.468884][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.480201][ T30] 1 lock held by iou-wrk-15403/15412: [ 830.487010][ T30] #0: ffff888049ac80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd06/0x1010 [ 830.497570][ T30] 1 lock held by syz-executor/17642: [ 830.502878][ T30] #0: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 830.513139][ T30] 7 locks held by syz-executor/17697: [ 830.518539][ T30] #0: ffff888029d96420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 830.528894][ T30] #1: ffff88803f5e9888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 830.539174][ T30] #2: ffff88801ef07788 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 830.550317][ T30] #3: ffffffff8f51d268 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 830.561058][ T30] #4: ffff888023e990e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 830.572092][ T30] #5: ffff888023e9a250 (&devlink->lock_key#78){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 830.585422][ T30] #6: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 830.603407][ T30] 1 lock held by syz-executor/17740: [ 830.608737][ T30] #0: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 830.618814][ T30] 1 lock held by syz-executor/17837: [ 830.625428][ T30] #0: ffffffff8fc80448 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 830.636028][ T30] 1 lock held by syz.1.2255/17869: [ 830.641173][ T30] #0: ffffffff8e93cbb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 830.652680][ T30] [ 830.683152][ T30] ============================================= [ 830.683152][ T30] [ 830.783111][ T30] NMI backtrace for cpu 0 [ 830.787485][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 830.798049][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 830.808119][ T30] Call Trace: [ 830.811413][ T30] [ 830.814372][ T30] dump_stack_lvl+0x241/0x360 [ 830.819095][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 830.824328][ T30] ? __pfx__printk+0x10/0x10 [ 830.828935][ T30] ? vprintk_emit+0x631/0x770 [ 830.833644][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 830.838696][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 830.843653][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 830.849122][ T30] ? _printk+0xd5/0x120 [ 830.853288][ T30] ? __pfx__printk+0x10/0x10 [ 830.857901][ T30] ? __wake_up_klogd+0xcc/0x110 [ 830.862745][ T30] ? __pfx__printk+0x10/0x10 [ 830.867332][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 830.872350][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 830.878333][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 830.884314][ T30] watchdog+0xfee/0x1030 [ 830.888557][ T30] ? watchdog+0x1ea/0x1030 [ 830.892971][ T30] ? __pfx_watchdog+0x10/0x10 [ 830.897642][ T30] kthread+0x2f0/0x390 [ 830.901704][ T30] ? __pfx_watchdog+0x10/0x10 [ 830.906373][ T30] ? __pfx_kthread+0x10/0x10 [ 830.910961][ T30] ret_from_fork+0x4b/0x80 [ 830.915373][ T30] ? __pfx_kthread+0x10/0x10 [ 830.919952][ T30] ret_from_fork_asm+0x1a/0x30 [ 830.924721][ T30] [ 830.927803][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.934772][ T30] Sending NMI from CPU 0 to CPUs 1: [ 830.940025][ C1] NMI backtrace for cpu 1 [ 830.940040][ C1] CPU: 1 UID: 0 PID: 15404 Comm: iou-wrk-15403 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 830.940060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 830.940070][ C1] RIP: 0010:unwind_next_frame+0x50b/0x2a00 [ 830.940099][ C1] Code: 49 8d 5c 45 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 34 48 63 2b 48 01 dd 48 89 ef 4c 89 f6 70 5c 52 00 48 8d 43 04 4c 39 f5 4c 0f 46 e8 48 8d 43 fc 4c 0f [ 830.940113][ C1] RSP: 0018:ffffc900045471c8 EFLAGS: 00000293 [ 830.940128][ C1] RAX: 0000000000000000 RBX: ffffffff90274d0c RCX: dffffc0000000000 [ 830.940141][ C1] RDX: 0000000000000000 RSI: ffffffff8135b0fa RDI: ffffffff8135b0e6 [ 830.940153][ C1] RBP: ffffffff8135b0e6 R08: ffffffff81410c60 R09: ffffc90004547390 [ 830.940165][ C1] R10: 0000000000000003 R11: ffffffff817f0ca0 R12: ffffffff90274d14 [ 830.940177][ C1] R13: ffffffff90274d08 R14: ffffffff8135b0fa R15: ffffffff90274d04 [ 830.940190][ C1] FS: 00007f1cf374e6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 830.940205][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.940217][ C1] CR2: 000000002009b000 CR3: 000000002acba000 CR4: 00000000003506f0 [ 830.940232][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.940242][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.940253][ C1] Call Trace: [ 830.940260][ C1] [ 830.940267][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 830.940285][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 830.940307][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 830.940323][ C1] ? nmi_handle+0x2a/0x5a0 [ 830.940347][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 830.940365][ C1] ? nmi_handle+0x14f/0x5a0 [ 830.940381][ C1] ? nmi_handle+0x2a/0x5a0 [ 830.940397][ C1] ? unwind_next_frame+0x50b/0x2a00 [ 830.940417][ C1] ? default_do_nmi+0x63/0x160 [ 830.940434][ C1] ? exc_nmi+0x123/0x1f0 [ 830.940450][ C1] ? end_repeat_nmi+0xf/0x53 [ 830.940466][ C1] ? ret_from_fork+0x4a/0x80 [ 830.940487][ C1] ? ret_from_fork+0x36/0x80 [ 830.940505][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 830.940525][ C1] ? unwind_next_frame+0x510/0x2a00 [ 830.940550][ C1] ? ret_from_fork+0x4a/0x80 [ 830.940569][ C1] ? ret_from_fork+0x36/0x80 [ 830.940587][ C1] ? unwind_next_frame+0x50b/0x2a00 [ 830.940609][ C1] ? unwind_next_frame+0x50b/0x2a00 [ 830.940630][ C1] ? unwind_next_frame+0x50b/0x2a00 [ 830.940651][ C1] [ 830.940657][ C1] [ 830.940665][ C1] ? ret_from_fork+0x4a/0x80 [ 830.940686][ C1] ? ret_from_fork+0x4b/0x80 [ 830.940704][ C1] ? ret_from_fork+0x4b/0x80 [ 830.940724][ C1] ? __kernel_text_address+0xd/0x40 [ 830.940740][ C1] ? ret_from_fork+0x4b/0x80 [ 830.940758][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 830.940778][ C1] arch_stack_walk+0x151/0x1b0 [ 830.940797][ C1] ? ret_from_fork+0x4b/0x80 [ 830.940819][ C1] stack_trace_save+0x118/0x1d0 [ 830.940838][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 830.940859][ C1] ? stack_depot_save_flags+0x29/0x830 [ 830.940879][ C1] kasan_save_track+0x3f/0x80 [ 830.940898][ C1] ? kasan_save_track+0x3f/0x80 [ 830.940916][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 830.940934][ C1] ? kmem_cache_alloc_bulk_noprof+0x4cd/0x770 [ 830.940952][ C1] ? io_provide_buffers+0x58f/0x1010 [ 830.940971][ C1] ? io_issue_sqe+0x36a/0x1570 [ 830.940986][ C1] ? io_wq_submit_work+0x7c3/0xbe0 [ 830.941002][ C1] ? io_worker_handle_work+0x85a/0x11c0 [ 830.941017][ C1] ? io_wq_worker+0x4bc/0xed0 [ 830.941032][ C1] ? ret_from_fork+0x4b/0x80 [ 830.941074][ C1] __kasan_slab_alloc+0x66/0x80 [ 830.941095][ C1] kmem_cache_alloc_bulk_noprof+0x4cd/0x770 [ 830.941119][ C1] io_provide_buffers+0x58f/0x1010 [ 830.941139][ C1] ? __lock_acquire+0x137a/0x2040 [ 830.941166][ C1] ? __pfx_io_provide_buffers+0x10/0x10 [ 830.941219][ C1] io_issue_sqe+0x36a/0x1570 [ 830.941240][ C1] ? __pfx_io_issue_sqe+0x10/0x10 [ 830.941255][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 830.941272][ C1] ? __pfx_lock_release+0x10/0x10 [ 830.941295][ C1] io_wq_submit_work+0x7c3/0xbe0 [ 830.941315][ C1] io_worker_handle_work+0x85a/0x11c0 [ 830.941345][ C1] io_wq_worker+0x4bc/0xed0 [ 830.941366][ C1] ? io_wq_worker+0x3e5/0xed0 [ 830.941383][ C1] ? __pfx_io_wq_worker+0x10/0x10 [ 830.941401][ C1] ? __pfx_io_wq_worker+0x10/0x10 [ 830.941417][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 830.941439][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 830.941457][ C1] ? __pfx_io_wq_worker+0x10/0x10 [ 830.941475][ C1] ? __pfx_io_wq_worker+0x10/0x10 [ 830.941489][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 830.941507][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 830.941526][ C1] ? __pfx_io_wq_worker+0x10/0x10 [ 830.941546][ C1] ret_from_fork+0x4b/0x80 [ 830.941565][ C1] ? __pfx_io_wq_worker+0x10/0x10 [ 830.941580][ C1] ret_from_fork_asm+0x1a/0x30 [ 830.941608][ C1] [ 831.163165][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 831.163185][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 [ 831.163207][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 831.163218][ T30] Call Trace: [ 831.163227][ T30] [ 831.163235][ T30] dump_stack_lvl+0x241/0x360 [ 831.163266][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 831.163290][ T30] ? __pfx__printk+0x10/0x10 [ 831.163309][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 831.163339][ T30] ? vscnprintf+0x5d/0x90 [ 831.163358][ T30] panic+0x349/0x860 [ 831.163381][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 831.163401][ T30] ? __pfx_panic+0x10/0x10 [ 831.163420][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 831.163440][ T30] ? __irq_work_queue_local+0x137/0x410 [ 831.163463][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 831.163482][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 831.163500][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 831.163529][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 831.163550][ T30] watchdog+0x102d/0x1030 [ 831.163574][ T30] ? watchdog+0x1ea/0x1030 [ 831.163601][ T30] ? __pfx_watchdog+0x10/0x10 [ 831.163624][ T30] kthread+0x2f0/0x390 [ 831.163640][ T30] ? __pfx_watchdog+0x10/0x10 [ 831.163661][ T30] ? __pfx_kthread+0x10/0x10 [ 831.163678][ T30] ret_from_fork+0x4b/0x80 [ 831.563177][ T30] ? __pfx_kthread+0x10/0x10 [ 831.567767][ T30] ret_from_fork_asm+0x1a/0x30 [ 831.572533][ T30] [ 831.575762][ T30] Kernel Offset: disabled [ 831.580071][ T30] Rebooting in 86400 seconds..