last executing test programs: 11.430804111s ago: executing program 4 (id=1599): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x97, &(0x7f0000000000)={@random="5b37182347bc", @random="130c937beae8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x61, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @local, [{0x0, 0x0, "7ca7"}, {0x1, 0x9, "3a0d0401ef96336d5348e209da1b941e6c8d3c17e894d8903b85b830096ddb1d744e299b2dbc660bdc5967c2922e6feba81e40c3d5a1661352c6a8b0c8b8d08404c4c5add500d7"}]}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000280), 0x2) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) close(r1) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) ioctl$IOMMU_VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) (async) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24}, 0x24}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvfrom(0xffffffffffffffff, 0x0, 0xf96, 0x3, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/cgroup', 0x0, 0x0) 11.159156116s ago: executing program 4 (id=1602): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011f7a000000084e041512000000000001090224000100006000090400000103000100092100400001220500090581030000df0005c29fc3c6c063fe9625d879bbca1f447cf65fea85b154cd16d6d8bb06fbb9eb4607116ae0a06b561ec3e8f146d8f5e464fd8f6f489efc289f5b38d21b9a80a8e6a8e4e22b1150a92edc2e9ff64441a3b7f0ba3b0c6b60a66caa797771e721ef2426d92fd6dd3d25bb8d97d96ef7a7aa40cd3bd4651bd8c57e29bc01"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffffff, 0x0, 0x4c00, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x88, 0x67, 0x0, 0x20000000) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) connect$inet(r6, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xc, &(0x7f0000000100), 0x4) socket$can_raw(0x1d, 0x3, 0x1) memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC?S\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb4Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008040) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080007400000000008000640000000010900010073797a30000000000900020073797a3200000000050007"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.515525385s ago: executing program 1 (id=1612): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={r3}, 0xc) ptrace$setsig(0x4203, r3, 0xfffffff4, &(0x7f0000000200)={0x32, 0xfffffffc, 0x10001}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x2}, 0x2}, 0x1c) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) getpeername(r1, &(0x7f0000000180)=@ieee802154, &(0x7f00000000c0)=0x80) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000140)='R', 0x1) syz_usb_disconnect(r5) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000d1400082bbd7000fddbdf2508003e0004000000080003000000000008003e01000080000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x83, &(0x7f0000000140)={r10}, 0x8) 6.451254235s ago: executing program 3 (id=1624): r0 = syz_io_uring_setup(0x1afe, &(0x7f0000000380)={0x0, 0x0, 0x400, 0x3, 0xdffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7083c43a42fb28b7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0x5452, &(0x7f0000000240)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb71b0}) 6.30299607s ago: executing program 3 (id=1625): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f7550692630902fb0bcb349276cdb2b08812cf979db4c3fbcfd5cd2d6e4342ab12bb32c869ebb4d35648bfc1b167e"], 0x11) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c8900a0006000004000000000000"], 0xf) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0xffffff02) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f00000000c0)) add_key$user(0x0, 0x0, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c26a21a5e0896bc5b515603985946e75f93f7bd54adfdb387b992d26814248b", 0xb1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.209464448s ago: executing program 1 (id=1626): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)}], 0x3) 5.970321086s ago: executing program 1 (id=1628): socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.836792756s ago: executing program 3 (id=1630): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000019dc15d88000000000000000000"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x100) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000300)={0x1d, r4}, 0x18) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) 5.715439269s ago: executing program 1 (id=1632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) 5.553575493s ago: executing program 1 (id=1633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000f61a0019022dbd7000fddbdf2564010102000000000000000000000000fc0200000000000000000000000000004e2203ff4e22fff80a0020a02e0000000bf5cfc8761aa5308d14054627adadbd173779f0e28c000b86435f1132bdb53b61fe448ad0ac4b480539462074b1017c2a2db616bb297184c2876e48b1393a3ec43cdcc6fde0fb7d505e00f702", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2ff0000000a010101000000000000000000000000ffffff7f00000000020000000000000001000000000000000000006025d5350007000000000000000100000000000000010000000000000001000100000000000000000000000000ffffff7f00000000070000000000000007ee0000000000000100000002000000010000002cbd7000063500000a00015281000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) 5.352483654s ago: executing program 3 (id=1635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc539, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3cf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0) r3 = syz_usb_connect$cdc_ncm(0x5, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0x3, 0xb0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "ab01603b"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x100, 0xffff, 0x4, 0x78}, {0x6, 0x24, 0x1a, 0x8, 0x2c}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xed9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x8, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x80, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xf7, 0x39}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xe, 0xe0, 0x5, 0x10, 0x76}, 0x33, &(0x7f0000000180)={0x5, 0xf, 0x33, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x6a, 0xf7, 0xe000, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x6, 0x2, 0x800}, @generic={0x16, 0x10, 0x1, "043fed0d81eea780209b94467e4fbad23288be"}, @ptm_cap={0x3}]}, 0x4, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0xac, &(0x7f0000000200)=@string={0xac, 0x3, "953f0319998153ceacbdbccbe8f84005016678db23529541e7c560cce0065b8c4159cf2db44c0bcc4b3de196071e8da960ebeebee2486c7ad2b1a5db3d18352ccac823bc632addf50e4377869ffe01bd19a65ae87769a008f13e0a6ca6bebe9a77e67fbcd65ad614c3c5a1ef62a7b073efd193c2512139631e5818d1ec866880062a2fb1c5a7d279bdac782f949008487c46c0ab2dfa8c95c8fe8b041ea44e50d1faafccdef41ac34ec5"}}, {0x9d, &(0x7f0000000340)=@string={0x9d, 0x3, "7cc085784a22ec0b32a0d4b63b7d133f3fb716b477fd8d7486c93ab8a886f9df5cb0aa391fed20fbb54ab11dc0312398617be90e91d2f4eb238f2f2f676fa49e26752d8bc6dc323b241988317f40f17e92285a1b475faa1d8f772d5f7353c36ba302fd9394ba268f9e30dad806cd06c78898ceeaa9befeff323ff70bec49fd46c280aa9eb863d4b3060a36d225c715aa29fef01e42ec69e4a8a723"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000580)={0xc, &(0x7f0000000440)={0x20, 0x23, 0xf0, {0xf0, 0x21, "2dffdb4441e825173a87969b664739c7510656cb990fff93245f4bba1e0f0dfc6ea7c08e5030bac86565726a937f725ecc3df1b9638d9980e9e5e81b219eb8cf1ba247fddaf9a01167ee96a9c864536900845d6ed1cbe34bd0376bbf4aa0e1e2d90198b72e2f4e0952a985fa9d53d522dab7208dcc937f878ef9543ada12f65b3cfa9bfa7379243192e459305926142f2087e342807f40c56ac15c4d56bf84cd4b1eb1ddba05a8f1124f4272daba8a3092c79eb39f7aeb4a1b4236737d8dfa84c386c632ab4ce93e8deee1c15c718f2db7e1a7a8d41c80de64ccc9a863cc2fd69e36a2f751e235f5b1b7f3c15c5b"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x24, &(0x7f00000005c0)={0x20, 0x30, 0xb9, "1239671b7f81535ea88461539c3cd106e9e0a5daff97d72a0cdc9b5377a1c2d47a2020340a17a5db4bd105f653d9acb96ee75d66a3d6bcab8d7a0a40af82c9ab3c27eff955e44083a7c3616b881a235bd275768bbf677b019150725b3c6787ffca507f4134c8a7dfa6107127ce66fb13d0b46dc3e9d967936d616b7b728105d3dc4c0968e6359e0c3d340729e8cae25a72a1fca6c9f5000eed301de878d5a777e52ad053c1369b438e8a97da6b80d27f0a4696409de9eda67c"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xd2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x5, 0x5, 0x400, 0x3, 0xfff9, 0x1c02, 0xd0, 0x80000001, 0x2, 0x8, 0x200, 0x8}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000780)={0x20, 0x83, 0x2}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000800)={0x20, 0x89, 0x2, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000070000000ada65aa"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffff"], 0x34}], 0x1}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x70, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x80, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x9c, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "9d"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x81, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0xfe}, @dmm={0x7, 0x24, 0x14, 0x200, 0x5}, @country_functional={0x6, 0x24, 0x7, 0x9e, 0x9}, @dmm={0x7, 0x24, 0x14, 0x400, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xdc, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0xfc, 0xe2, 0xf, 0x28, 0x48}, 0xce, &(0x7f0000000940)={0x5, 0xf, 0xce, 0x2, [@generic={0xc6, 0x10, 0x1, "27624b8acbf3f221b67b3238f57fa87beee171481ded39e0b5bcd1d5eaf31361ca11b82966267c646cdcf4f446dfe2e1a8366259b72611fc775a8c714d44898b898314e2cf8eec7d2eab5053a4d2996fd86c5eae84591b6f7104b062801f140c09fcaf05f297e2dfe0de17d2d0c521aa02128358d89d2f8b901394a70cf776e2578ea43d6ee25527eda0a860fcc42762e937032f38dbf261f7acbb07cd6cc0f785eec5bd201f3269c6cfc727d660a45864a19fc9707d648954c0eccd30cce5e0d9493f"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x2801}}, {0x90, &(0x7f0000000a80)=@string={0x90, 0x3, "47672c5321a35316dd54e2c2d05f6348ae4bd69a64add69d24bbb12cbb81580f5adabf56ec0f6a0520105fdce6b8f988cd9129b8849c6f01bab4522e2e2492b95e4768a448b86d2e6b6917c530a12eb748294fb8d25f4a9b45c891054ce6b13992c1f5f818e9a911648ed7dd2e3464a6d2d507331acbe0b7c9999c9a91d07c0916b8de78a63964c00792844f1cbb"}}, {0x4b, &(0x7f0000000b40)=@string={0x4b, 0x3, "1c12c6d83448f50d6e7f30313103d607ac089d416e0929ae9f5135944aa83fb7ec569bac6e987f0d7a88141fa65afd8c2d400b6b2679a86d50ed8e013f49f6f988d0872cc3084187fe"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3009}}]}) 5.234552876s ago: executing program 1 (id=1637): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) pwrite64(r0, &(0x7f0000000300)="c974b8e2285015ab8d8962df348b7a3385b5b12b58a9b80369a43eb7958cd4c0424528ec6f3bd05377faec599a59275cb9f6b409d229991afe295c2c84ea7c0804643ec487863261babe879e20cfa1023ac9498500ecaabe1806219b70a84a20b5ec4f51c67593286d271ed9fdf7fab5d6a7d0ed1a5a59b3b3bc4a2440ef24e4601458020d5be86cdf6a61fefc73a5dc0f439111bb11068e1aa22d788f9f97f09330255052dbb564ca982df29fff145d8c461a163ea34564c3eff34d2019b4b28b18cd910ad1450f9adc8f17d17f", 0xce, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001840)={{0x2, 0x5, 0xfffffffd, 0x3, 'syz0\x00', 0x1}, 0x6, 0x400, 0x8001, 0x0, 0x0, 0xe, 'syz0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88acef3c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 5.231002991s ago: executing program 0 (id=1638): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) 4.903914895s ago: executing program 0 (id=1640): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtclass={0x884, 0x28, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xe68cae220a3e3d54}, {0xfff1}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x80c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xe, 0x1, 0x5, 0x4, 0x2, 0x2, 0x400, 0xa, 0x0, 0x7ff, 0xffffffff, 0x1, 0xfffffff6, 0x40, 0x5, 0x3, 0x4, 0x3ff, 0x7, 0x0, 0x100000, 0x10, 0x2, 0x8, 0xea0, 0x1, 0x6, 0x7, 0x100, 0x5, 0x2, 0xced, 0x4, 0x5, 0x400, 0x8, 0x3a3f, 0x1, 0x5, 0x696, 0x1, 0x6, 0x3, 0x7, 0xffffffff, 0x2b, 0x0, 0x8, 0x1, 0xb0, 0x800, 0x4, 0x0, 0x7, 0x2, 0x3, 0x37d0000, 0x3, 0x1d, 0x6, 0x3, 0x9, 0x7, 0x5, 0x5, 0x9, 0x1a, 0x1ff, 0x4, 0x2, 0x1ff, 0x2, 0x6, 0xffffffff, 0x5, 0x1, 0xb07, 0x4, 0xff, 0xb8, 0xf, 0x6f17, 0x4, 0x3, 0x4, 0x0, 0x1, 0x7, 0x1, 0x70, 0x5, 0x3, 0x5da, 0x809, 0xf, 0x8, 0x9, 0x63fd, 0x7fffffff, 0x9, 0x7, 0xd6, 0x8, 0x2, 0xfffffff3, 0x8, 0x8000, 0x1, 0x7fffffff, 0x8, 0x4, 0x6, 0x75e3, 0x4, 0x3, 0x1, 0xfffffffc, 0x0, 0xa34, 0x2, 0x2, 0x5, 0xffff, 0xf2, 0x800, 0x9, 0x0, 0x7, 0x3, 0x0, 0x1, 0x80000000, 0xb, 0x0, 0x10, 0x9, 0x7a1, 0x2000, 0x1, 0x3, 0x1, 0x76b, 0x0, 0x2, 0x2, 0x8da, 0x7ff, 0x3, 0x3, 0x9, 0x8000, 0x6bf6, 0xfffffffe, 0x4, 0x10001, 0x7, 0x3, 0x5, 0x1d, 0x7f, 0x4, 0x0, 0x4, 0xe54, 0x6, 0x1, 0xe, 0x10, 0x7, 0x10000, 0x8, 0xfffffeff, 0x5, 0xffff, 0x4, 0x80000001, 0x2, 0x3, 0x80, 0x5, 0x2, 0xfffffff1, 0x8, 0x7, 0xffffffff, 0x8, 0x2, 0x80, 0x2, 0x5, 0x9, 0x401, 0x4, 0x7, 0x8000, 0xffff, 0x9, 0x9, 0xfffffe00, 0x8, 0x2, 0x72e0, 0x9, 0x401, 0x81, 0x2, 0x6, 0x5, 0x9, 0x6c, 0x3, 0x8, 0x0, 0x5, 0x1, 0x400, 0x2, 0x400, 0x6, 0x3, 0x32, 0x6, 0x3, 0x8000, 0xfffffffa, 0x71, 0x9b, 0x1, 0x702, 0x4, 0x8, 0x0, 0x2, 0x4, 0x3ff0c21, 0x7, 0x2, 0x9, 0x0, 0x2, 0x803a, 0x6, 0xa71b, 0x0, 0x8, 0x1, 0x3, 0x91, 0x0, 0xcd7, 0x82, 0xb, 0x0, 0xcad4, 0x6, 0xf8c]}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0x80000000, 0x990, 0x8, 0x9, 0x6, 0x5, 0x2, 0x9, 0x3ff, 0xff, 0x0, 0xa1, 0x3, 0x2, 0xd24e, 0x2, 0xc, 0x0, 0x3, 0x2, 0x5, 0xf, 0x0, 0x5, 0xba, 0x8, 0xf3, 0x2, 0x4, 0x458, 0x9, 0x734, 0x1000, 0x9, 0x3, 0x1, 0x1, 0x4, 0x9, 0x8, 0x75e, 0xbf, 0x3, 0x3bcd, 0x9, 0x2fb, 0x3, 0x6, 0x7, 0xffff, 0x10000, 0x8, 0x4, 0xf7, 0x10001, 0xe, 0x4, 0xffff, 0x9, 0x0, 0xfff, 0x0, 0x4, 0xd5f, 0x0, 0x6, 0x0, 0x3, 0x6, 0x2, 0x0, 0xc0000000, 0x5, 0x200, 0x8, 0x1000, 0x0, 0xb3f, 0x7, 0x2, 0x5, 0x1000, 0x2, 0xfffffe01, 0x7fffffff, 0x3, 0x3, 0x1, 0x0, 0x5, 0x8, 0xfffffffe, 0x7, 0x8, 0x8, 0x81, 0x7, 0x8, 0x80000001, 0x5, 0x1, 0x1ff, 0x80000001, 0x2, 0x2, 0x81, 0xff, 0x13e7289a, 0x80000000, 0x0, 0x1, 0x10, 0x2, 0x100, 0x4, 0x0, 0x2, 0x3, 0x846d, 0x7, 0x9, 0x3a, 0xcb5f, 0x7ff, 0x100, 0x5, 0x7, 0x7, 0x6, 0xb4, 0x7fff, 0x3, 0x6, 0x5, 0x67e3, 0x4, 0x8e, 0x1, 0x80, 0x6, 0xbe7f, 0x4, 0x8, 0x9, 0x8, 0x2, 0x7d8, 0x5, 0x0, 0x401, 0x6, 0xd, 0x80000000, 0x9, 0xd5, 0x0, 0x3, 0x101, 0x81, 0xb82, 0xfffff995, 0x401, 0x7, 0x4, 0x9, 0x6, 0x2, 0x4, 0x9, 0x35a5, 0x9, 0x7ff, 0xc2a, 0xe6fd, 0x7, 0x2, 0x9, 0x8, 0x1000, 0x5, 0x7fff, 0x6, 0x7c637be9, 0x1, 0x140000, 0x7, 0x0, 0x3, 0x81, 0x101, 0x1, 0x10001, 0x3, 0x8, 0xe2, 0x0, 0x5, 0xbf, 0x7, 0xb847, 0x44, 0x9, 0x2, 0x0, 0x7, 0xa, 0x4, 0x2, 0x8100, 0x1, 0x6, 0xfffffffa, 0xe0c1, 0x8000, 0x4, 0xbe4, 0x1, 0x9, 0xa48, 0x1, 0x4, 0x5, 0x9, 0x1, 0x7, 0x3, 0x0, 0x9, 0x5, 0x0, 0x2, 0xff, 0x10, 0xd3a, 0x8b, 0xf, 0xfffeffff, 0x3, 0x3b4, 0x10, 0x2, 0x8, 0x8, 0x0, 0x9bb5, 0x10, 0x9, 0xfff, 0x101, 0x81, 0x80000000, 0x8000, 0x3, 0x8, 0x9]}]}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0xc3}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x884}}, 0x1) r0 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000b80)={@empty, @broadcast, @val={@void}, {@generic={0x88a2, "0da3"}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @loopback}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000180)=""/231, 0xe7}], 0x1, 0x2, 0xfff5) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 4.467071485s ago: executing program 0 (id=1642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000600)={@local, @random="bf7d132b5a64", @void, {@ipv4={0x800, @icmp={{0x3c, 0x4, 0x0, 0x1, 0xf8, 0x67, 0x0, 0xf2, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x42, [@remote]}, @timestamp={0x44, 0x10, 0xa, 0x0, 0x8, [0x10000, 0x43, 0x6]}, @timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0xc, [{@remote}, {@multicast2, 0xfffffff1}, {@empty, 0x5}, {@loopback, 0xe}, {@loopback, 0x7f}, {@remote, 0x7}, {@multicast2, 0x800}, {@empty, 0x1}]}, @generic={0x88, 0x6, "0cd5fad1"}, @cipso={0x86, 0x4c, 0x2, [{0x5, 0x5, "846b77"}, {0x6, 0x12, "8467c2997b70b7adf9bd89003dc95e56"}, {0x5, 0xd, "f7343fd609469b11bbdffd"}, {0x1, 0xe, "72e0a34a0c970cc3386666f8"}, {0x6, 0x12, "0e651e8cda6be15dce71edf8b3ec06c0"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101}, {@broadcast, 0x5eb}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffff6}, {@empty, 0x1e}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 4.186090773s ago: executing program 0 (id=1643): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) 4.070746128s ago: executing program 0 (id=1644): r0 = socket(0x15, 0x3, 0x9) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_usb_connect(0x0, 0xe4, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYBLOB="c51e"], 0x0) close(r1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) fgetxattr(r0, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/51, 0x33) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000007c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000ec0)={0x0, 0x0, r5, r8, 0x3, 0x0, 0x0, 0x202003, {0x1, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, "f617bf12f85ec608623fd5c9416ff7ab766cf1de733075a1def5082be47a6f4b"}}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000040)={r8, 0xae, 0x3ff, 0x30315559, 0x0, [], [0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x7]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) 3.146945983s ago: executing program 4 (id=1645): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000019dc15d88000000000000000000"], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x100) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000300)={0x1d, r4}, 0x18) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) 3.052177157s ago: executing program 2 (id=1646): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = io_uring_setup(0x104a, &(0x7f0000001440)={0x0, 0x0, 0x800, 0x0, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200180600fe8000000000000000000000000000bbfe80cc055d5ecc1a1098e41cf700000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600000009078000022020000"], 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x7db2, 0x4) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000002a00)) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x40}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002840)={'gretap0\x00', &(0x7f0000002940)={'gretap0\x00', r6, 0x7, 0x7800, 0x886e, 0x30bf0000, {{0x26, 0x4, 0x1, 0xf, 0x98, 0x66, 0x0, 0x95, 0x2d, 0x0, @private=0xa010102, @empty, {[@lsrr={0x83, 0x27, 0xa, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @loopback, @multicast1, @private=0xa010102, @private=0xa010101, @rand_addr=0x64010101]}, @timestamp={0x44, 0x24, 0x5e, 0x0, 0x4, [0x1ff, 0x3573, 0x4, 0x2, 0x6, 0xfffffff4, 0xffff39f0, 0x0]}, @timestamp_prespec={0x44, 0x4, 0x31, 0x3, 0xb}, @lsrr={0x83, 0x1f, 0x6f, [@rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, @local, @multicast1, @loopback, @loopback]}, @timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x5, [{@multicast2, 0x2}]}, @rr={0x7, 0x7, 0x2f, [@private=0xa010100]}]}}}}}) recvmmsg(r4, &(0x7f0000002880)=[{{&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000002a40)=""/235, 0xec}, {&(0x7f0000002b40)=""/4102, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/219, 0xdb}, {&(0x7f0000002400)=""/113, 0x3d}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000002480)=""/3, 0x3}, {&(0x7f00000024c0)=""/179, 0xb3}, {&(0x7f0000002580)=""/91, 0x5b}], 0xa, &(0x7f00000026c0)=""/119, 0x77}, 0x5}, {{&(0x7f0000002740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002800)=[{&(0x7f00000027c0)=""/29, 0x1d}], 0x13, &(0x7f0000002900)=""/11, 0xb}, 0x8}], 0x2, 0x2000, 0x0) r8 = syz_open_pts(r2, 0x8080) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) read(r8, 0x0, 0x2006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) eventfd(0x0) close(r1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 2.931822517s ago: executing program 0 (id=1647): unshare(0x2c060000) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0xc00, 0x0, 0x0) 2.347165947s ago: executing program 3 (id=1649): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) 2.14750471s ago: executing program 3 (id=1650): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup(r0) preadv(r1, &(0x7f0000000180)=[{&(0x7f000000c300)=""/102386, 0x18ff2}], 0x1, 0xa30e, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.068339339s ago: executing program 2 (id=1651): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtclass={0x884, 0x28, 0x4, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xb, 0xe68cae220a3e3d54}, {0xfff1}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_htb={{0x8}, {0x80c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0xe, 0x1, 0x5, 0x4, 0x2, 0x2, 0x400, 0xa, 0x0, 0x7ff, 0xffffffff, 0x1, 0xfffffff6, 0x40, 0x5, 0x3, 0x4, 0x3ff, 0x7, 0x0, 0x100000, 0x10, 0x2, 0x8, 0xea0, 0x1, 0x6, 0x7, 0x100, 0x5, 0x2, 0xced, 0x4, 0x5, 0x400, 0x8, 0x3a3f, 0x1, 0x5, 0x696, 0x1, 0x6, 0x3, 0x7, 0xffffffff, 0x2b, 0x0, 0x8, 0x1, 0xb0, 0x800, 0x4, 0x0, 0x7, 0x2, 0x3, 0x37d0000, 0x3, 0x1d, 0x6, 0x3, 0x9, 0x7, 0x5, 0x5, 0x9, 0x1a, 0x1ff, 0x4, 0x2, 0x1ff, 0x2, 0x6, 0xffffffff, 0x5, 0x1, 0xb07, 0x4, 0xff, 0xb8, 0xf, 0x6f17, 0x4, 0x3, 0x4, 0x0, 0x1, 0x7, 0x1, 0x70, 0x5, 0x3, 0x5da, 0x809, 0xf, 0x8, 0x9, 0x63fd, 0x7fffffff, 0x9, 0x7, 0xd6, 0x8, 0x2, 0xfffffff3, 0x8, 0x8000, 0x1, 0x7fffffff, 0x8, 0x4, 0x6, 0x75e3, 0x4, 0x3, 0x1, 0xfffffffc, 0x0, 0xa34, 0x2, 0x2, 0x5, 0xffff, 0xf2, 0x800, 0x9, 0x0, 0x7, 0x3, 0x0, 0x1, 0x80000000, 0xb, 0x0, 0x10, 0x9, 0x7a1, 0x2000, 0x1, 0x3, 0x1, 0x76b, 0x0, 0x2, 0x2, 0x8da, 0x7ff, 0x3, 0x3, 0x9, 0x8000, 0x6bf6, 0xfffffffe, 0x4, 0x10001, 0x7, 0x3, 0x5, 0x1d, 0x7f, 0x4, 0x0, 0x4, 0xe54, 0x6, 0x1, 0xe, 0x10, 0x7, 0x10000, 0x8, 0xfffffeff, 0x5, 0xffff, 0x4, 0x80000001, 0x2, 0x3, 0x80, 0x5, 0x2, 0xfffffff1, 0x8, 0x7, 0xffffffff, 0x8, 0x2, 0x80, 0x2, 0x5, 0x9, 0x401, 0x4, 0x7, 0x8000, 0xffff, 0x9, 0x9, 0xfffffe00, 0x8, 0x2, 0x72e0, 0x9, 0x401, 0x81, 0x2, 0x6, 0x5, 0x9, 0x6c, 0x3, 0x8, 0x0, 0x5, 0x1, 0x400, 0x2, 0x400, 0x6, 0x3, 0x32, 0x6, 0x3, 0x8000, 0xfffffffa, 0x71, 0x9b, 0x1, 0x702, 0x4, 0x8, 0x0, 0x2, 0x4, 0x3ff0c21, 0x7, 0x2, 0x9, 0x0, 0x2, 0x803a, 0x6, 0xa71b, 0x0, 0x8, 0x1, 0x3, 0x91, 0x0, 0xcd7, 0x82, 0xb, 0x0, 0xcad4, 0x6, 0xf8c]}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0x80000000, 0x990, 0x8, 0x9, 0x6, 0x5, 0x2, 0x9, 0x3ff, 0xff, 0x0, 0xa1, 0x3, 0x2, 0xd24e, 0x2, 0xc, 0x0, 0x3, 0x2, 0x5, 0xf, 0x0, 0x5, 0xba, 0x8, 0xf3, 0x2, 0x4, 0x458, 0x9, 0x734, 0x1000, 0x9, 0x3, 0x1, 0x1, 0x4, 0x9, 0x8, 0x75e, 0xbf, 0x3, 0x3bcd, 0x9, 0x2fb, 0x3, 0x6, 0x7, 0xffff, 0x10000, 0x8, 0x4, 0xf7, 0x10001, 0xe, 0x4, 0xffff, 0x9, 0x0, 0xfff, 0x0, 0x4, 0xd5f, 0x0, 0x6, 0x0, 0x3, 0x6, 0x2, 0x0, 0xc0000000, 0x5, 0x200, 0x8, 0x1000, 0x0, 0xb3f, 0x7, 0x2, 0x5, 0x1000, 0x2, 0xfffffe01, 0x7fffffff, 0x3, 0x3, 0x1, 0x0, 0x5, 0x8, 0xfffffffe, 0x7, 0x8, 0x8, 0x81, 0x7, 0x8, 0x80000001, 0x5, 0x1, 0x1ff, 0x80000001, 0x2, 0x2, 0x81, 0xff, 0x13e7289a, 0x80000000, 0x0, 0x1, 0x10, 0x2, 0x100, 0x4, 0x0, 0x2, 0x3, 0x846d, 0x7, 0x9, 0x3a, 0xcb5f, 0x7ff, 0x100, 0x5, 0x7, 0x7, 0x6, 0xb4, 0x7fff, 0x3, 0x6, 0x5, 0x67e3, 0x4, 0x8e, 0x1, 0x80, 0x6, 0xbe7f, 0x4, 0x8, 0x9, 0x8, 0x2, 0x7d8, 0x5, 0x0, 0x401, 0x6, 0xd, 0x80000000, 0x9, 0xd5, 0x0, 0x3, 0x101, 0x81, 0xb82, 0xfffff995, 0x401, 0x7, 0x4, 0x9, 0x6, 0x2, 0x4, 0x9, 0x35a5, 0x9, 0x7ff, 0xc2a, 0xe6fd, 0x7, 0x2, 0x9, 0x8, 0x1000, 0x5, 0x7fff, 0x6, 0x7c637be9, 0x1, 0x140000, 0x7, 0x0, 0x3, 0x81, 0x101, 0x1, 0x10001, 0x3, 0x8, 0xe2, 0x0, 0x5, 0xbf, 0x7, 0xb847, 0x44, 0x9, 0x2, 0x0, 0x7, 0xa, 0x4, 0x2, 0x8100, 0x1, 0x6, 0xfffffffa, 0xe0c1, 0x8000, 0x4, 0xbe4, 0x1, 0x9, 0xa48, 0x1, 0x4, 0x5, 0x9, 0x1, 0x7, 0x3, 0x0, 0x9, 0x5, 0x0, 0x2, 0xff, 0x10, 0xd3a, 0x8b, 0xf, 0xfffeffff, 0x3, 0x3b4, 0x10, 0x2, 0x8, 0x8, 0x0, 0x9bb5, 0x10, 0x9, 0xfff, 0x101, 0x81, 0x80000000, 0x8000, 0x3, 0x8, 0x9]}]}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0xc3}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x884}}, 0x1) r0 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000b80)={@empty, @broadcast, @val={@void}, {@generic={0x88a2, "0da3"}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev, @loopback}}}}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000180)=""/231, 0xe7}], 0x1, 0x2, 0xfff5) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 565.403385ms ago: executing program 2 (id=1652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000600)={@local, @random="bf7d132b5a64", @void, {@ipv4={0x800, @icmp={{0x3c, 0x4, 0x0, 0x1, 0xf8, 0x67, 0x0, 0xf2, 0x1, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x42, [@remote]}, @timestamp={0x44, 0x10, 0xa, 0x0, 0x8, [0x10000, 0x43, 0x6]}, @timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0xc, [{@remote}, {@multicast2, 0xfffffff1}, {@empty, 0x5}, {@loopback, 0xe}, {@loopback, 0x7f}, {@remote, 0x7}, {@multicast2, 0x800}, {@empty, 0x1}]}, @generic={0x88, 0x6, "0cd5fad1"}, @cipso={0x86, 0x4c, 0x2, [{0x5, 0x5, "846b77"}, {0x6, 0x12, "8467c2997b70b7adf9bd89003dc95e56"}, {0x5, 0xd, "f7343fd609469b11bbdffd"}, {0x1, 0xe, "72e0a34a0c970cc3386666f8"}, {0x6, 0x12, "0e651e8cda6be15dce71edf8b3ec06c0"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010101}, {@broadcast, 0x5eb}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffff6}, {@empty, 0x1e}]}]}}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 545.632734ms ago: executing program 4 (id=1653): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) 436.099909ms ago: executing program 2 (id=1654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x7) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000240)=""/82, 0x52}], 0x2}, 0x40002160) sendmmsg(r1, &(0x7f0000000480), 0x21, 0xfff5) 411.733689ms ago: executing program 4 (id=1655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x5, "5b4c97df"}, @local=@item_4={0x3, 0x2, 0xa, "a8d0a4d5"}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xfdfdffffffffffff, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r8, 0x80284504, &(0x7f0000000400)) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000a80)={{r1}, r9, 0x0, @unused=[0x4, 0xb, 0x10000, 0x8], @subvolid=0x9}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000640)={{}, r9, 0x10, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x8001, 0x8, {0x4, 0x8, 0x9, 0x5, 0x100000001}, [0x800, 0xe, 0x2, 0x2, 0x5]}}, @name="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"}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r10, &(0x7f0000000e80)=@xdp={0x2c, 0x0, 0x0}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010008105000400"/20, @ANYRES32=r11, @ANYBLOB="0580040000000000500002800b00010067656e6576650000400002800500080000000000050008000100000005000d000200000008000b4000001e8205000d00020000001400070000000000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002400000000304000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) 290.771916ms ago: executing program 2 (id=1656): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x6, @raw_data="49cd4db81a5c260700000000c00000ecc20604812ca95e9fa50210e08bf08fe0a30044124efea76d04ec5eafd0360c90ac8472d70c7bcb7be7a92477c3f83bf4088c70d79f8eb68b0a244cb6118213e07124b501e6c3d6b51e73f51c9d3e8cff07c8898a5c29a64c32ab248172603592153717e4d798f3ee5d7ab907a440cfae1425a654877156901ee4f7bb15775e301709db0aa23ee93b1cc5f466829bd14f50fb385449ca56a9063bcf1b0f006d3000"}) 273.817151ms ago: executing program 2 (id=1657): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) syz_genetlink_get_family_id$ethtool(0x0, r0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x4e, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) r3 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}) r4 = syz_io_uring_setup(0x0, &(0x7f0000000900)={0x0, 0xcdba, 0x90, 0x0, 0x0, 0x0, r3}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a00)={0x5, 0x0, [{0x1000, 0x0, &(0x7f0000000500)=""/242}, {0x1, 0x0, &(0x7f0000000800)=""/161}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) r6 = socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x4118, &(0x7f0000000680)={0x0, 0x80dd, 0x4, 0x2, 0xc6, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000700)) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="020d00000a0000000000000000000000030005000000000002000000ff000000000000000800000005000600000000000a00000000000000fc00"/80], 0x50}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) 0s ago: executing program 4 (id=1658): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) kernel console output (not intermixed with test programs): :50 [ 498.928524][ T5286] usb 5-1: USB disconnect, device number 80 [ 498.967946][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.072970][ T9] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 499.154043][ T9] usb 3-1: USB disconnect, device number 86 [ 499.207257][T10608] udevd[10608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.384672][T12987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.447596][T12987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.953960][T12999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.977621][T12999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.993277][T12999] xt_bpf: check failed: parse error [ 500.314301][ T5286] usb 4-1: USB disconnect, device number 91 [ 500.537935][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 500.537947][ T29] audit: type=1800 audit(1724994952.300:1111): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1481" name="/" dev="fuse" ino=1 res=0 errno=0 [ 500.683873][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1481'. [ 500.925725][ T1103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.972933][T13020] mac80211_hwsim hwsim97 wlan1: entered promiscuous mode [ 500.999098][T13020] mac80211_hwsim hwsim97 wlan1: left promiscuous mode [ 501.122386][ T1103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.277012][ T1103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.460726][ T1103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.562849][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.572408][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.593039][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.607334][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.617191][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 501.624605][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.720399][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.726955][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.901258][ T1103] bridge_slave_1: left allmulticast mode [ 501.921016][ T1103] bridge_slave_1: left promiscuous mode [ 501.936331][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.022463][ T1103] bridge_slave_0: left allmulticast mode [ 502.028866][ T1103] bridge_slave_0: left promiscuous mode [ 502.034633][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.449230][T10825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 502.471885][T10825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 502.481322][T10825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 502.499704][T10825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 502.529972][T10825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 502.548504][T10825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 502.652609][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802e5b9000: rx timeout, send abort [ 502.661172][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802e5b9000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 502.832750][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.843912][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.857221][ T1103] bond0 (unregistering): Released all slaves [ 503.444352][ T5320] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 503.603847][ T1103] hsr_slave_0: left promiscuous mode [ 503.618891][ T1103] hsr_slave_1: left promiscuous mode [ 503.641003][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.657927][ T5320] usb 3-1: config 0 interface 0 altsetting 253 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 503.666964][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.677277][ T5320] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 503.688822][ T5320] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x88 has invalid wMaxPacketSize 0 [ 503.689564][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.699521][ T5320] usb 3-1: config 0 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 503.707399][ T5231] Bluetooth: hci4: command tx timeout [ 503.721461][ T5320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 503.733297][ T5320] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 503.742493][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.753733][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.769710][ T5320] usb 3-1: config 0 descriptor?? [ 503.804246][ T1103] veth1_macvtap: left promiscuous mode [ 503.814132][ T1103] veth0_macvtap: left promiscuous mode [ 503.821935][ T1103] veth1_vlan: left promiscuous mode [ 503.831756][ T1103] veth0_vlan: left promiscuous mode [ 504.035748][ T5231] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 504.045460][ T5231] Bluetooth: hci1: Injecting HCI hardware error event [ 504.055140][ T5231] Bluetooth: hci1: hardware error 0x00 [ 504.514061][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.547439][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.558980][T13061] xt_cluster: node mask cannot exceed total number of nodes [ 504.585001][T10825] Bluetooth: hci3: command tx timeout [ 504.725818][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 504.780791][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 505.310753][T13052] chnl_net:caif_netlink_parms(): no params data found [ 505.361862][T13091] veth1_macvtap: left promiscuous mode [ 505.378616][T13091] macsec0: entered promiscuous mode [ 505.383877][T13091] macsec0: entered allmulticast mode [ 505.471496][T13031] chnl_net:caif_netlink_parms(): no params data found [ 505.491838][ T5320] usbhid 3-1:0.0: can't add hid device: -71 [ 505.502239][ T5320] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 505.533400][ T5320] usb 3-1: USB disconnect, device number 87 [ 505.788746][T10825] Bluetooth: hci4: command tx timeout [ 505.923014][T13052] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.932617][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.956594][T13052] bridge_slave_0: entered allmulticast mode [ 505.993092][T13052] bridge_slave_0: entered promiscuous mode [ 506.016632][T13052] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.046441][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.053709][T13052] bridge_slave_1: entered allmulticast mode [ 506.105025][ T5231] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 506.113122][T13052] bridge_slave_1: entered promiscuous mode [ 506.294347][T13031] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.321618][T13031] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.335219][T13031] bridge_slave_0: entered allmulticast mode [ 506.342550][T13031] bridge_slave_0: entered promiscuous mode [ 506.472117][T13052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.525191][T13031] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.532436][T13031] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.540067][T13031] bridge_slave_1: entered allmulticast mode [ 506.547835][T13031] bridge_slave_1: entered promiscuous mode [ 506.626573][T13052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.656498][T13031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.674957][ T5231] Bluetooth: hci3: command tx timeout [ 506.708885][T10825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.713988][T13031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.727073][T10825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.736451][T10825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.744531][T10825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.754759][T10825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 506.763125][T10825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.857425][T10825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.867014][T10825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.876278][T10825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.902668][T10825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.910888][T10825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 506.918575][T10825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.027666][T13052] team0: Port device team_slave_0 added [ 507.037826][T13052] team0: Port device team_slave_1 added [ 507.083101][T13031] team0: Port device team_slave_0 added [ 507.222099][T13031] team0: Port device team_slave_1 added [ 507.249000][T13052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.264153][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.292516][ T5338] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 507.323871][T13052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.347961][T13052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.364996][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.421734][T13052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.508262][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 507.553427][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 507.574973][ T5338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 507.584683][ T5338] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 507.643167][ T5338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.659369][ T5338] usb 3-1: config 0 descriptor?? [ 507.668899][ T5338] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.678911][ T5338] usb 3-1: MIDIStreaming interface descriptor not found [ 507.803462][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.874970][ T5231] Bluetooth: hci4: command tx timeout [ 507.910054][ T46] usb 3-1: USB disconnect, device number 88 [ 507.923305][T13052] hsr_slave_0: entered promiscuous mode [ 507.942655][T13052] hsr_slave_1: entered promiscuous mode [ 507.958694][T13052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.963391][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1511'. [ 507.969333][T13052] Cannot create hsr debugfs directory [ 507.993325][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 508.023912][T13031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.032863][T13031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.060591][T13031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.109022][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.130560][T13031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.138851][T13031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.166336][T13031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.248884][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.377436][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.396217][T13031] hsr_slave_0: entered promiscuous mode [ 508.402514][T13031] hsr_slave_1: entered promiscuous mode [ 508.408943][T13031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.417300][T13031] Cannot create hsr debugfs directory [ 508.608665][T13127] chnl_net:caif_netlink_parms(): no params data found [ 508.710802][T13052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.735557][T13153] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1512'. [ 508.744737][T13153] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1512'. [ 508.759497][ T5231] Bluetooth: hci3: command tx timeout [ 508.825426][ T5231] Bluetooth: hci0: command tx timeout [ 508.883955][T13052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.984053][T13125] chnl_net:caif_netlink_parms(): no params data found [ 508.996382][ T5231] Bluetooth: hci2: command tx timeout [ 509.062645][T13052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.080831][T13159] veth1_macvtap: left promiscuous mode [ 509.086874][T13159] macsec0: entered promiscuous mode [ 509.092074][T13159] macsec0: entered allmulticast mode [ 509.204061][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.264243][T13052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.315986][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.323189][T13127] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.343624][T13127] bridge_slave_0: entered allmulticast mode [ 509.353712][T13127] bridge_slave_0: entered promiscuous mode [ 509.448970][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.467542][T13127] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.483787][T13127] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.491992][T13127] bridge_slave_1: entered allmulticast mode [ 509.506092][T13127] bridge_slave_1: entered promiscuous mode [ 509.601348][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.704399][ T1103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.724334][T13127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.752840][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.760102][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.773119][T13125] bridge_slave_0: entered allmulticast mode [ 509.780187][T13125] bridge_slave_0: entered promiscuous mode [ 509.795266][T13127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.869675][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.877239][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.884485][T13125] bridge_slave_1: entered allmulticast mode [ 509.892976][T13125] bridge_slave_1: entered promiscuous mode [ 509.930625][T13127] team0: Port device team_slave_0 added [ 509.954977][ T5231] Bluetooth: hci4: command tx timeout [ 509.988052][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.024176][T13127] team0: Port device team_slave_1 added [ 510.047920][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.160736][T13127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.168424][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.199089][T13127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.241493][T13125] team0: Port device team_slave_0 added [ 510.250323][T13052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.310880][T13127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.327397][T13127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.353323][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.413418][T13127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.592771][T13125] team0: Port device team_slave_1 added [ 510.612753][T13052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.830384][ T5231] Bluetooth: hci3: command tx timeout [ 510.906662][T13052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.914999][ T5231] Bluetooth: hci0: command tx timeout [ 510.932765][T13052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.996493][T13127] hsr_slave_0: entered promiscuous mode [ 510.998981][T10825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.012648][T13127] hsr_slave_1: entered promiscuous mode [ 511.012803][T10825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.029110][T13127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.030546][T10825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.041155][T13127] Cannot create hsr debugfs directory [ 511.045993][T10825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.065062][T10825] Bluetooth: hci2: command tx timeout [ 511.067831][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 511.086317][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.173089][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.190189][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.221906][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.243065][ T1103] bridge_slave_1: left allmulticast mode [ 511.248895][ T1103] bridge_slave_1: left promiscuous mode [ 511.254598][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.264458][ T1103] bridge_slave_0: left allmulticast mode [ 511.270272][ T1103] bridge_slave_0: left promiscuous mode [ 511.277324][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.288455][ T1103] bridge_slave_1: left allmulticast mode [ 511.294102][ T1103] bridge_slave_1: left promiscuous mode [ 511.300543][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.318678][ T1103] bridge_slave_0: left allmulticast mode [ 511.324356][ T1103] bridge_slave_0: left promiscuous mode [ 511.330588][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.953094][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.964028][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.974766][ T1103] bond0 (unregistering): Released all slaves [ 512.100928][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.113686][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.126702][ T1103] bond0 (unregistering): Released all slaves [ 512.154345][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.161792][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.198218][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.449286][T13125] hsr_slave_0: entered promiscuous mode [ 512.456479][T13125] hsr_slave_1: entered promiscuous mode [ 512.462532][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.472211][T13125] Cannot create hsr debugfs directory [ 512.675696][T13031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.745877][T13031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.756696][T13031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 512.837458][T13031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 512.987312][ T5231] Bluetooth: hci0: command tx timeout [ 513.033743][T13052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.057443][T13052] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.093379][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.100508][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.110204][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.117376][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.145232][ T5231] Bluetooth: hci2: command tx timeout [ 513.145428][ T5240] Bluetooth: hci1: command tx timeout [ 513.194067][ T1103] hsr_slave_0: left promiscuous mode [ 513.200484][ T1103] hsr_slave_1: left promiscuous mode [ 513.210268][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.219347][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.237135][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.244629][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.256771][ T1103] hsr_slave_0: left promiscuous mode [ 513.262584][ T1103] hsr_slave_1: left promiscuous mode [ 513.273045][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.280536][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.289518][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.297483][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.335937][ T1103] veth0_macvtap: left promiscuous mode [ 513.341753][ T1103] veth1_vlan: left promiscuous mode [ 513.348020][ T1103] veth0_vlan: left promiscuous mode [ 513.354305][ T1103] veth1_macvtap: left promiscuous mode [ 513.359990][ T1103] veth0_macvtap: left promiscuous mode [ 513.365848][ T1103] veth1_vlan: left promiscuous mode [ 513.371258][ T1103] veth0_vlan: left promiscuous mode [ 513.942234][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 513.987716][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 514.773623][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 514.818161][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 515.070546][ T5240] Bluetooth: hci0: command tx timeout [ 515.224996][ T5240] Bluetooth: hci2: command tx timeout [ 515.230445][ T5240] Bluetooth: hci1: command tx timeout [ 515.291521][T13052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.302212][T13052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.314503][T13198] chnl_net:caif_netlink_parms(): no params data found [ 515.538057][T13052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.587088][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.594192][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.601687][T13198] bridge_slave_0: entered allmulticast mode [ 515.609329][T13198] bridge_slave_0: entered promiscuous mode [ 515.623913][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.633271][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.640765][T13198] bridge_slave_1: entered allmulticast mode [ 515.648712][T13198] bridge_slave_1: entered promiscuous mode [ 515.672973][T13031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.771992][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.784558][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.838197][T13052] veth0_vlan: entered promiscuous mode [ 515.911629][T13198] team0: Port device team_slave_0 added [ 515.921000][T13198] team0: Port device team_slave_1 added [ 515.930868][T13052] veth1_vlan: entered promiscuous mode [ 515.941925][T13031] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.038184][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.050055][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.076464][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.099486][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.106652][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.140158][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.147519][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.174293][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.189909][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.197328][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.214508][T13052] veth0_macvtap: entered promiscuous mode [ 516.269895][T13052] veth1_macvtap: entered promiscuous mode [ 516.381525][T13198] hsr_slave_0: entered promiscuous mode [ 516.388753][T13198] hsr_slave_1: entered promiscuous mode [ 516.411205][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.422766][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.435706][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.446290][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.457869][T13052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.466956][T13127] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 516.477312][T13127] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 516.524418][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.535537][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.547886][T13052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.558718][T13052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.570969][T13052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.592892][T13127] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 516.606185][T13127] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 516.648729][T13052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.657840][T13052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.667254][T13052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.677016][T13052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.720517][T13031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.731546][T13031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.777292][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.815343][T13125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.888736][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.904036][T13125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.916438][T13125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.953979][T13125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.974215][T13031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.013493][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.098789][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.214258][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.240117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.268564][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.281082][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.306853][ T5240] Bluetooth: hci1: command tx timeout [ 517.487979][ T1103] bridge_slave_1: left allmulticast mode [ 517.493675][ T1103] bridge_slave_1: left promiscuous mode [ 517.510310][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.534146][ T1103] bridge_slave_0: left allmulticast mode [ 517.543903][ T1103] bridge_slave_0: left promiscuous mode [ 517.551405][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.786162][ T5287] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 517.985874][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 517.993786][ T5287] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 518.001921][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 518.016810][ T5287] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.028809][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 518.041278][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 518.054399][ T5287] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 518.062350][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 518.073762][ T5287] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.086771][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 518.087218][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.105184][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 518.120536][ T5287] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 518.129309][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.130716][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 518.150855][ T5287] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 518.162617][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 518.173813][ T5287] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 518.175771][ T1103] bond0 (unregistering): Released all slaves [ 518.189664][ T5287] usb 2-1: string descriptor 0 read error: -22 [ 518.198844][ T5287] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 518.208261][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.242075][ T5287] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 518.329721][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.410983][T13031] veth0_vlan: entered promiscuous mode [ 518.430180][T13127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.493013][T13031] veth1_vlan: entered promiscuous mode [ 518.517754][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.602280][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.609464][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.645223][ T5338] usb 2-1: USB disconnect, device number 94 [ 518.658471][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.665642][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.718731][ T1103] hsr_slave_0: left promiscuous mode [ 518.744636][ T1103] hsr_slave_1: left promiscuous mode [ 518.773825][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.783095][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.802613][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.812838][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.852506][ T1103] veth0_macvtap: left promiscuous mode [ 518.868752][ T1103] veth1_vlan: left promiscuous mode [ 518.874148][ T1103] veth0_vlan: left promiscuous mode [ 519.404904][ T5240] Bluetooth: hci1: command tx timeout [ 519.656930][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 519.701960][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 520.160655][T13127] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.191878][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.199078][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.306093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.313293][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.529814][T13031] veth0_macvtap: entered promiscuous mode [ 520.547206][T13031] veth1_macvtap: entered promiscuous mode [ 520.583574][T13198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 520.605937][T13198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.651985][T13127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.680855][T13198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 520.742570][T13198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 520.770135][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.788906][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.803287][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.815932][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.827984][T13031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.869833][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.881823][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.894211][T13031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.914403][T13031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.927073][T13031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.938756][T13127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.969244][T13031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.983605][T13031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.997164][T13031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.009563][T13031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.041756][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.285114][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.292981][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.399900][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.440872][T13127] veth0_vlan: entered promiscuous mode [ 521.444851][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.512833][T13125] veth0_vlan: entered promiscuous mode [ 521.582247][T13127] veth1_vlan: entered promiscuous mode [ 521.669719][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.690003][T13125] veth1_vlan: entered promiscuous mode [ 521.756483][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.774125][T13127] veth0_macvtap: entered promiscuous mode [ 521.796843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.804053][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.836023][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.843181][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.855547][T13127] veth1_macvtap: entered promiscuous mode [ 522.003550][ T1116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.057377][T13125] veth0_macvtap: entered promiscuous mode [ 522.091830][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.124680][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.154895][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.171492][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.204190][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.232396][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.259275][T13127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.342539][T13125] veth1_macvtap: entered promiscuous mode [ 522.372906][ T1116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.404405][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.434308][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.446801][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.465062][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.487385][T13127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.515340][T13127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.547763][T13127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.587159][T13127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.599195][T13127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.608551][T13127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.617505][T13127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.745680][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.746656][ T1116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.773828][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.785400][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.794538][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.811651][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 522.819465][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.921940][ T1116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.049629][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.062527][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.072442][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.083052][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.092889][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.103378][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.113237][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.123743][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.135728][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.180300][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.194270][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.204378][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.214938][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.225856][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.236381][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.246461][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.257910][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.269865][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.282522][T13125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.291991][T13125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.300764][T13125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.310577][T13125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.526526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.555246][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.631229][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.881694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.906779][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.908509][ T1116] bridge_slave_1: left allmulticast mode [ 523.924878][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.937049][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.938697][ T1116] bridge_slave_1: left promiscuous mode [ 523.952322][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.983044][ T1116] bridge_slave_0: left allmulticast mode [ 523.991220][ T1116] bridge_slave_0: left promiscuous mode [ 523.997444][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.487879][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.501644][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.513014][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.529617][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.540675][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 524.550512][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.706972][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.719330][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.730446][ T1116] bond0 (unregistering): Released all slaves [ 524.815394][T13308] chnl_net:caif_netlink_parms(): no params data found [ 524.914739][ T5240] Bluetooth: hci3: command tx timeout [ 524.928232][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.944602][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.210395][T13198] veth0_vlan: entered promiscuous mode [ 525.317492][T13353] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1515'. [ 525.523695][ T5286] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 525.667625][T13308] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.700580][T13308] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.708109][ T1184] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 525.725258][T13308] bridge_slave_0: entered allmulticast mode [ 525.743258][T13308] bridge_slave_0: entered promiscuous mode [ 525.749282][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 525.761728][ T5286] usb 1-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 525.785465][T13198] veth1_vlan: entered promiscuous mode [ 525.794501][ T5286] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.831688][ T5286] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 525.861514][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.889911][ T5286] usb 1-1: config 0 descriptor?? [ 525.921856][ T1116] hsr_slave_0: left promiscuous mode [ 525.933401][ T1116] hsr_slave_1: left promiscuous mode [ 525.934754][ T1184] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 525.952014][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.964718][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.973292][ T1184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.977335][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.987027][ T1184] usb 4-1: config 0 descriptor?? [ 525.989971][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.027605][ T1184] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 526.030102][ T1116] veth1_macvtap: left promiscuous mode [ 526.040750][ T1116] veth0_macvtap: left promiscuous mode [ 526.046608][ T1116] veth1_vlan: left promiscuous mode [ 526.052118][ T1116] veth0_vlan: left promiscuous mode [ 526.295119][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x1 [ 526.315717][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.336651][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.358122][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.390129][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.409633][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.425963][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.433554][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.467291][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.488269][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.498319][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.513516][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.540541][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.549529][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.557211][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.565148][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.573455][ T2637] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 526.585203][ T5240] Bluetooth: hci4: command tx timeout [ 526.623326][ T2637] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 526.931663][ T1184] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 526.985223][ T5240] Bluetooth: hci3: command tx timeout [ 527.444142][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 527.513582][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 528.203099][ T1184] gspca_cpia1: usb_control_msg 02, error -110 [ 528.210250][ T1184] gspca_cpia1: usb_control_msg 05, error -32 [ 528.225785][ T1184] gspca_cpia1: usb_control_msg 05, error -32 [ 528.236306][ T1184] gspca_cpia1: usb_control_msg 05, error -32 [ 528.242694][ T1184] gspca_cpia1: usb_control_msg 05, error -32 [ 528.254606][ T1184] cpia1 4-1:0.0: unexpected systemstate: 00 [ 528.272936][T13308] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.295136][T13308] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.303185][T13308] bridge_slave_1: entered allmulticast mode [ 528.319070][T13308] bridge_slave_1: entered promiscuous mode [ 528.401177][ T5236] usb 4-1: USB disconnect, device number 92 [ 528.407326][ T5286] usb 1-1: USB disconnect, device number 60 [ 528.581141][T13308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.640847][T13308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.664946][ T5240] Bluetooth: hci4: command tx timeout [ 528.846143][T13308] team0: Port device team_slave_0 added [ 528.888185][T13308] team0: Port device team_slave_1 added [ 528.961003][T13394] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 529.061382][T13308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.075729][ T5240] Bluetooth: hci3: command tx timeout [ 529.100548][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.163185][T13308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.193172][T13308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.223743][T13308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.258170][T13308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.335102][ T5320] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 529.529291][T13198] veth0_macvtap: entered promiscuous mode [ 529.554966][ T5320] usb 1-1: Using ep0 maxpacket: 8 [ 529.558846][T13340] chnl_net:caif_netlink_parms(): no params data found [ 529.571570][ T5320] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 529.590944][ T5320] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 529.591887][T13308] hsr_slave_0: entered promiscuous mode [ 529.612546][ T5320] usb 1-1: Product: syz [ 529.622143][ T5320] usb 1-1: Manufacturer: syz [ 529.632335][T13308] hsr_slave_1: entered promiscuous mode [ 529.634834][ T5320] usb 1-1: SerialNumber: syz [ 529.655712][ T5320] usb 1-1: config 0 descriptor?? [ 529.658604][T13308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.687459][ T5320] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 529.689528][T13308] Cannot create hsr debugfs directory [ 529.932840][T13416] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 529.983232][T13198] veth1_macvtap: entered promiscuous mode [ 530.086698][ T5320] gspca_zc3xx: reg_r err -71 [ 530.123768][ T5320] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 530.151538][ T5320] usb 1-1: USB disconnect, device number 61 [ 530.246665][ T1116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.275279][ T1184] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 530.288913][T13340] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.301772][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.311257][T13340] bridge_slave_0: entered allmulticast mode [ 530.321132][T13340] bridge_slave_0: entered promiscuous mode [ 530.340953][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.354661][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.367512][T13340] bridge_slave_1: entered allmulticast mode [ 530.378046][T13340] bridge_slave_1: entered promiscuous mode [ 530.420932][ T1116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.485014][ T1184] usb 4-1: Using ep0 maxpacket: 8 [ 530.502739][ T1184] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 530.524703][ T1184] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 530.544333][ T1184] usb 4-1: Product: syz [ 530.550298][ T1184] usb 4-1: Manufacturer: syz [ 530.566245][ T1184] usb 4-1: SerialNumber: syz [ 530.578431][ T1184] usb 4-1: config 0 descriptor?? [ 530.593064][ T1184] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 530.648273][ T1116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.677365][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.700445][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.717464][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.728850][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.742375][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.754551][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.754918][ T5240] Bluetooth: hci4: command tx timeout [ 530.764760][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.834933][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.851040][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.893122][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.913512][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.928511][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.943701][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.955174][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.965758][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.016731][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.060860][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.074562][ T1184] gspca_zc3xx: reg_r err -71 [ 531.079495][ T1184] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 531.107481][ T1184] usb 4-1: USB disconnect, device number 93 [ 531.114435][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.147396][ T5240] Bluetooth: hci3: command tx timeout [ 531.152960][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.248127][ T1116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.282259][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.386119][T13340] team0: Port device team_slave_0 added [ 531.394991][ T5338] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 531.431490][T13198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.440611][T13198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.458889][T13198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.468713][T13198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.488019][T13340] team0: Port device team_slave_1 added [ 531.541339][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.553070][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.581824][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.614548][ T5338] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 531.633084][ T5338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.680810][ T5338] usb 1-1: config 0 descriptor?? [ 531.707794][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.727157][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.754054][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.091769][ T1116] bridge_slave_1: left allmulticast mode [ 532.104881][ T1116] bridge_slave_1: left promiscuous mode [ 532.116294][ T5338] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 532.125092][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.142956][ T1116] bridge_slave_0: left allmulticast mode [ 532.151748][ T1116] bridge_slave_0: left promiscuous mode [ 532.164514][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.687516][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.702037][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.716487][ T1116] bond0 (unregistering): Released all slaves [ 532.762056][T13340] hsr_slave_0: entered promiscuous mode [ 532.772877][T13340] hsr_slave_1: entered promiscuous mode [ 532.779758][T13340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.789457][T13340] Cannot create hsr debugfs directory [ 532.836169][ T5240] Bluetooth: hci4: command tx timeout [ 532.916783][ T29] audit: type=1326 audit(1724994984.680:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 532.961128][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 532.969600][ T29] audit: type=1326 audit(1724994984.680:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 532.994395][ T29] audit: type=1326 audit(1724994984.680:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.017569][ T29] audit: type=1326 audit(1724994984.680:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.040051][ T29] audit: type=1326 audit(1724994984.680:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.062416][ T29] audit: type=1326 audit(1724994984.680:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.088777][ T29] audit: type=1326 audit(1724994984.680:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.111008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.122825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.128001][ T29] audit: type=1326 audit(1724994984.680:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.152656][ T29] audit: type=1326 audit(1724994984.680:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.3.1534" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 533.254425][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.285317][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.505769][ T1116] hsr_slave_0: left promiscuous mode [ 533.531788][ T1116] hsr_slave_1: left promiscuous mode [ 533.549791][ T5338] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 533.558786][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.569651][T13464] trusted_key: encrypted_key: insufficient parameters specified [ 533.586067][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.617453][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.644732][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.723498][ T1116] veth1_macvtap: left promiscuous mode [ 533.757395][ T1116] veth0_macvtap: left promiscuous mode [ 533.776815][ T1116] veth1_vlan: left promiscuous mode [ 533.786773][ T1116] veth0_vlan: left promiscuous mode [ 533.995261][ T1184] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 534.212855][ T1184] usb 4-1: Using ep0 maxpacket: 8 [ 534.226847][ T1184] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 534.235025][ T1184] usb 4-1: config 0 has no interface number 0 [ 534.241167][ T1184] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.274506][ T1184] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 534.313323][ T1184] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 534.347011][ T1184] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 534.370655][ T1184] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 534.382443][ T1184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.390983][ T1184] usb 4-1: Product: syz [ 534.395277][ T1184] usb 4-1: Manufacturer: syz [ 534.399891][ T1184] usb 4-1: SerialNumber: syz [ 534.412951][ T1184] usb 4-1: config 0 descriptor?? [ 534.695084][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 534.773777][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 534.824686][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 534.898436][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.916700][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.937147][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.946675][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.958653][ T9] usb 3-1: config 0 descriptor?? [ 535.523435][ T9] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 535.538991][ T35] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 535.546399][ T1184] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 535.563849][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0033/input/input30 [ 535.604905][ T1184] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 15 is not bulk. [ 535.614867][ T1184] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 535.635724][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.642349][ T1184] usb 4-1: USB disconnect, device number 94 [ 535.654479][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.784412][ T9] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 535.830141][ T9] usb 3-1: USB disconnect, device number 89 [ 535.879895][T13496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.905615][T13496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.231664][T13308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 536.242376][ T29] audit: type=1326 audit(1724994988.000:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.3.1541" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x0 [ 536.271998][T13308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 536.364495][T13308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 536.400101][T13308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 536.452663][T13513] netlink: 'syz.3.1541': attribute type 12 has an invalid length. [ 536.465262][T13513] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1541'. [ 536.799508][ T2637] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 536.951088][T13308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.996256][ T2637] usb 3-1: Using ep0 maxpacket: 16 [ 537.013508][ T2637] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 537.033837][ T2637] usb 3-1: config 0 has no interface number 0 [ 537.043659][ T2637] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 537.050027][T13308] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.082995][ T2637] usb 3-1: config 0 interface 46 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 537.098594][T13340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 537.114980][ T2637] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffe8, bcdDevice=39.dc [ 537.143341][ T2637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.152108][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.159300][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.174578][ T2637] usb 3-1: config 0 descriptor?? [ 537.180359][T13340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 537.182077][T13514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 537.221883][T13340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 537.236200][T13340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 537.293454][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.300616][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.414190][T13536] trusted_key: encrypted_key: insufficient parameters specified [ 537.506990][ T2637] usb 3-1: string descriptor 0 read error: -71 [ 537.523163][ T2637] option 3-1:0.46: GSM modem (1-port) converter detected [ 537.567397][ T2637] usb 3-1: USB disconnect, device number 90 [ 537.603977][ T2637] option 3-1:0.46: device disconnected [ 537.730076][T13308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.771594][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.861120][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.889871][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.907438][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.914622][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.927220][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.965830][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.973031][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.051537][T13308] veth0_vlan: entered promiscuous mode [ 538.100554][T13308] veth1_vlan: entered promiscuous mode [ 538.172181][T13340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.217894][T13308] veth0_macvtap: entered promiscuous mode [ 538.242689][T13308] veth1_macvtap: entered promiscuous mode [ 538.307510][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.334088][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.348878][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.359729][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.370086][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.397592][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.410653][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.423667][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.440040][T13308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.474266][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.508675][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.536948][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.554459][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.574059][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.594613][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.606101][T13308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.619488][T13308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.638473][T13308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.653148][T13308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.669001][T13308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.683682][T13308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.737314][T13308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.835395][ T5338] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 538.862418][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.924047][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.958227][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.035443][ T5338] usb 3-1: Using ep0 maxpacket: 8 [ 539.056017][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.064539][ T5338] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 539.082988][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.090675][ T5338] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 539.107908][ T5338] usb 3-1: Product: syz [ 539.110406][T13340] veth0_vlan: entered promiscuous mode [ 539.118344][ T5338] usb 3-1: Manufacturer: syz [ 539.123084][ T5338] usb 3-1: SerialNumber: syz [ 539.130778][ T5338] usb 3-1: config 0 descriptor?? [ 539.149221][ T5338] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 539.179433][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.202850][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.256443][T13340] veth1_vlan: entered promiscuous mode [ 539.354145][T13340] veth0_macvtap: entered promiscuous mode [ 539.374756][T13340] veth1_macvtap: entered promiscuous mode [ 539.416056][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.430521][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.443988][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.457693][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.468474][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.479052][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.491675][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.502659][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.529594][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.550350][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.560008][T13584] netlink: 'syz.1.1521': attribute type 11 has an invalid length. [ 539.562544][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.582187][ T5338] gspca_zc3xx: reg_r err -71 [ 539.585247][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 539.591709][ T5338] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 539.639660][ T5338] usb 3-1: USB disconnect, device number 91 [ 539.643314][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.673897][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.715018][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.727151][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.739063][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.750971][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.761138][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.779070][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.806053][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.823962][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.849442][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.854187][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.870048][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.913840][T13340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.928176][T13340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.937321][T13340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.947846][T13340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.121461][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.152170][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.204675][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.224691][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.408946][T13600] trusted_key: encrypted_key: insufficient parameters specified [ 540.468411][ T5338] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 540.644952][ T5318] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 540.677837][ T5338] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 540.696768][ T5338] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 540.745877][ T5338] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 540.774903][ T5338] usb 4-1: config 0 has no interface number 0 [ 540.801394][ T5338] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 540.830505][ T5338] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 540.863383][ T5318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.878356][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 540.898152][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 540.912095][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 196, setting to 64 [ 540.925677][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 540.940012][ T5338] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 540.949191][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.963903][ T5338] usb 4-1: Product: syz [ 540.970622][ T5338] usb 4-1: Manufacturer: syz [ 540.978340][ T5338] usb 4-1: SerialNumber: syz [ 540.989277][ T5318] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 540.999705][ T5338] usb 4-1: config 0 descriptor?? [ 541.004847][ T5318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.015063][ T5318] usb 5-1: Product: syz [ 541.021106][ T5338] cdc_ether 4-1:0.185: skipping garbage [ 541.026953][ T5338] cdc_ether 4-1:0.185: skipping garbage [ 541.032539][ T5318] usb 5-1: Manufacturer: syz [ 541.047495][ T5338] cdc_ether 4-1:0.185: skipping garbage [ 541.054563][ T5338] usb 4-1: bad CDC descriptors [ 541.086019][ T5318] usb 5-1: SerialNumber: syz [ 541.091292][ T5338] usb 4-1: unsupported MDLM descriptors [ 541.111644][ T5318] usb 5-1: config 0 descriptor?? [ 541.122142][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.146583][ T5318] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 541.162078][ T5318] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 541.177225][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.206801][ T5318] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 541.236825][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 541.256130][T13624] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1553'. [ 541.308280][ T4902] gs_usb 1-1:0.0 can0: bit-timing not yet defined [ 541.342674][T13627] trusted_key: encrypted_key: key user:syz not found [ 541.370320][T13628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.445541][T13628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.457086][T13627] netlink: 'syz.2.1560': attribute type 11 has an invalid length. [ 541.480164][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1560'. [ 541.480309][T13628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.480695][T13621] block device autoloading is deprecated and will be removed. [ 541.558164][T13628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.561068][T13621] syz.0.1559: attempt to access beyond end of device [ 541.561068][T13621] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 541.603606][T13597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.617809][T13597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.647244][ T5338] usb 5-1: USB disconnect, device number 81 [ 541.675232][ T5338] garmin_gps 5-1:0.0: device disconnected [ 542.094954][ T5318] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 542.209145][T13636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.258219][T13636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.285144][T13636] random: crng reseeded on system resumption [ 542.302628][T13636] FAULT_INJECTION: forcing a failure. [ 542.302628][T13636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 542.320275][T13636] CPU: 1 UID: 0 PID: 13636 Comm: syz.0.1563 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 542.324894][ T5318] usb 2-1: Using ep0 maxpacket: 16 [ 542.331051][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 542.346210][T13636] Call Trace: [ 542.349483][T13636] [ 542.352405][T13636] dump_stack_lvl+0x241/0x360 [ 542.357086][T13636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.362287][T13636] ? __pfx__printk+0x10/0x10 [ 542.366871][T13636] ? stack_trace_save+0x118/0x1d0 [ 542.371893][T13636] should_fail_ex+0x3b0/0x4e0 [ 542.376573][T13636] prepare_alloc_pages+0x1da/0x5d0 [ 542.381687][T13636] __alloc_pages_noprof+0x166/0x6c0 [ 542.386883][T13636] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 542.392610][T13636] alloc_pages_mpol_noprof+0x3e8/0x680 [ 542.398070][T13636] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 542.404047][T13636] ? alloc_pages_noprof+0xef/0x170 [ 542.409156][T13636] get_zeroed_page_noprof+0x17/0x40 [ 542.414350][T13636] get_image_page+0x38/0x330 [ 542.418947][T13636] memory_bm_create+0x3cf/0x9b0 [ 542.423792][T13636] ? __kasan_kmalloc+0x98/0xb0 [ 542.428553][T13636] ? create_basic_memory_bitmaps+0x76/0x380 [ 542.434447][T13636] create_basic_memory_bitmaps+0x8d/0x380 [ 542.440162][T13636] snapshot_open+0x1af/0x280 [ 542.444744][T13636] ? __pfx_snapshot_open+0x10/0x10 [ 542.449854][T13636] misc_open+0x313/0x390 [ 542.454094][T13636] chrdev_open+0x5b0/0x630 [ 542.458505][T13636] ? __pfx_chrdev_open+0x10/0x10 [ 542.463438][T13636] ? security_file_open+0x51a/0x750 [ 542.468629][T13636] ? __pfx_chrdev_open+0x10/0x10 [ 542.473559][T13636] do_dentry_open+0x970/0x1440 [ 542.478324][T13636] vfs_open+0x3e/0x330 [ 542.482389][T13636] path_openat+0x2b3e/0x3470 [ 542.486975][T13636] ? __pfx_stack_trace_save+0x10/0x10 [ 542.492340][T13636] ? __lock_acquire+0x137a/0x2040 [ 542.497377][T13636] ? __pfx_path_openat+0x10/0x10 [ 542.502318][T13636] do_filp_open+0x235/0x490 [ 542.506815][T13636] ? __pfx_do_filp_open+0x10/0x10 [ 542.511844][T13636] ? _raw_spin_unlock+0x28/0x50 [ 542.516690][T13636] ? alloc_fd+0x5a1/0x640 [ 542.521021][T13636] do_sys_openat2+0x13e/0x1d0 [ 542.525700][T13636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.531683][T13636] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.536962][T13636] ? __fget_files+0x3f6/0x470 [ 542.541641][T13636] __ia32_compat_sys_openat+0x23f/0x290 [ 542.547206][T13636] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 542.553293][T13636] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 542.559892][T13636] ? lockdep_hardirqs_on+0x99/0x150 [ 542.565094][T13636] __do_fast_syscall_32+0xb4/0x110 [ 542.570202][T13636] ? exc_page_fault+0x590/0x8c0 [ 542.575051][T13636] do_fast_syscall_32+0x34/0x80 [ 542.579893][T13636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.586213][T13636] RIP: 0023:0xf747d579 [ 542.590268][T13636] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 542.610038][T13636] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 542.618445][T13636] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000200000c0 [ 542.626411][T13636] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.634372][T13636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.642335][T13636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 542.650296][T13636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.658273][T13636] [ 542.677396][ T5318] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 542.686825][ T5318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.701013][ T5318] usb 2-1: Product: syz [ 542.705348][ T5318] usb 2-1: Manufacturer: syz [ 542.710189][ T5318] usb 2-1: SerialNumber: syz [ 542.720921][ T5318] usb 2-1: config 0 descriptor?? [ 542.742610][ T5318] as10x_usb: device has been detected [ 542.749213][ T5318] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 542.797729][ T5318] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 542.888578][ T5318] as10x_usb: error during firmware upload part1 [ 542.895187][ T5318] Registered device Sky IT Digital Key (green led) [ 542.953908][T13647] trusted_key: encrypted_key: insufficient parameters specified [ 542.984231][T13632] random: crng reseeded on system resumption [ 543.075029][ T2637] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 543.213911][ T5287] usb 4-1: USB disconnect, device number 95 [ 543.266127][ T2637] usb 3-1: Using ep0 maxpacket: 8 [ 543.297608][ T2637] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 543.360627][ T2637] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 543.383283][ T46] usb 2-1: USB disconnect, device number 95 [ 543.399167][ T2637] usb 3-1: Product: syz [ 543.406740][ T2637] usb 3-1: Manufacturer: syz [ 543.412031][ T2637] usb 3-1: SerialNumber: syz [ 543.420961][ T46] Unregistered device Sky IT Digital Key (green led) [ 543.428807][ T46] as10x_usb: device has been disconnected [ 543.445559][ T2637] usb 3-1: config 0 descriptor?? [ 543.496452][ T2637] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 543.529132][T13658] netlink: 'syz.3.1569': attribute type 11 has an invalid length. [ 543.540602][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 543.574884][ T5338] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 543.721384][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.732667][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.775016][ T5338] usb 5-1: Using ep0 maxpacket: 8 [ 543.782116][ T5338] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 543.797119][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.809186][ T5338] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.821127][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.832736][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 543.849230][ T5338] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 543.857106][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.872978][ T5338] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.873065][ T2637] gspca_zc3xx: reg_r err -71 [ 543.892732][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.892782][ T2637] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 543.912856][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 543.920179][ T2637] usb 3-1: USB disconnect, device number 92 [ 543.938261][ T5338] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 543.965818][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.977684][ T5338] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.989472][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 544.004696][ T5338] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 544.056709][ T5338] usb 5-1: string descriptor 0 read error: -22 [ 544.063878][ T5338] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 544.073102][ T5338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.096576][ T5338] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 544.556181][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.568717][ T5338] usb 5-1: USB disconnect, device number 82 [ 544.635114][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.760234][T13685] trusted_key: encrypted_key: insufficient parameters specified [ 545.116013][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 545.249893][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'. [ 545.526544][ T25] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 545.542934][T13705] netlink: 'syz.0.1584': attribute type 11 has an invalid length. [ 545.552334][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 545.608352][ T29] audit: type=1326 audit(1724994997.360:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.656890][ T29] audit: type=1326 audit(1724994997.360:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.700457][ T29] audit: type=1326 audit(1724994997.400:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.724965][ T25] usb 2-1: device descriptor read/64, error -71 [ 545.758721][ T29] audit: type=1326 audit(1724994997.400:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.811051][ T29] audit: type=1326 audit(1724994997.400:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.872656][ T29] audit: type=1326 audit(1724994997.400:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.915307][ T29] audit: type=1326 audit(1724994997.400:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.941291][ T29] audit: type=1326 audit(1724994997.400:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 545.988574][ T29] audit: type=1326 audit(1724994997.400:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 546.001299][T13717] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 546.014916][ T25] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 546.042688][ T29] audit: type=1326 audit(1724994997.400:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13710 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 546.214897][ T25] usb 2-1: device descriptor read/64, error -71 [ 546.336063][ T25] usb usb2-port1: attempt power cycle [ 546.395764][ T5338] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 546.563902][T13730] trusted_key: encrypted_key: insufficient parameters specified [ 546.614986][ T5338] usb 5-1: Using ep0 maxpacket: 8 [ 546.683975][ T5338] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 546.721035][ T5338] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 546.744010][ T5338] usb 5-1: Product: syz [ 546.750220][ T5338] usb 5-1: Manufacturer: syz [ 546.755020][ T25] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 546.755852][ T5338] usb 5-1: SerialNumber: syz [ 546.815695][ T25] usb 2-1: device descriptor read/8, error -71 [ 546.834082][ T5338] usb 5-1: config 0 descriptor?? [ 546.856102][ T5338] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 547.153101][ T25] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 547.217364][ T25] usb 2-1: device descriptor read/8, error -71 [ 547.255761][ T5338] gspca_zc3xx: reg_r err -71 [ 547.272034][ T5338] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 547.287044][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.304251][ T5338] usb 5-1: USB disconnect, device number 83 [ 547.355328][ T25] usb usb2-port1: unable to enumerate USB device [ 547.363775][T13741] wg2: entered promiscuous mode [ 547.369044][T13741] wg2: entered allmulticast mode [ 548.208850][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 548.352156][T13764] netlink: 'syz.0.1600': attribute type 11 has an invalid length. [ 548.378538][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 548.511674][T13771] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 548.654885][ T5338] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 548.695071][ T46] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 548.857100][ T5338] usb 5-1: Using ep0 maxpacket: 8 [ 548.887179][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.914040][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.932775][ T46] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 548.947807][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.956404][ T46] usb 2-1: Product: syz [ 548.961358][ T46] usb 2-1: Manufacturer: syz [ 548.969247][ T46] usb 2-1: SerialNumber: syz [ 548.980182][ T46] usb 2-1: config 0 descriptor?? [ 549.002955][ T46] usb 2-1: ucan: probing device on interface #0 [ 549.043157][ T46] usb 2-1: ucan: invalid EP count (0) [ 549.054871][ T46] usb 2-1: ucan: probe failed; try to update the device firmware [ 549.155148][ T25] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 549.226386][T13783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.238807][T13783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.307530][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'. [ 549.338851][ T2637] IPVS: starting estimator thread 0... [ 549.355069][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 549.372212][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 549.401228][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 549.449665][T13787] IPVS: using max 33 ests per chain, 79200 per kthread [ 549.457459][T13788] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 549.468524][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.514562][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.545569][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 549.561121][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 549.572789][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 549.592716][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.614845][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.633117][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 549.662538][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 549.671533][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 549.694957][ T25] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.728111][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.747711][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 549.772136][ T25] usb 3-1: string descriptor 0 read error: -22 [ 549.781745][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 549.805002][ T46] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 549.823830][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.855019][ T25] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 549.993967][T13795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.005370][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 550.060592][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 550.078949][T13795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.101315][ T46] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 550.132116][ T46] usb 4-1: Product: syz [ 550.146200][ T46] usb 4-1: Manufacturer: syz [ 550.158705][ T46] usb 4-1: SerialNumber: syz [ 550.183566][ T46] usb 4-1: config 0 descriptor?? [ 550.241531][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 550.306585][ T1184] usb 3-1: USB disconnect, device number 93 [ 550.336385][ T5318] usb 2-1: USB disconnect, device number 100 [ 550.620574][ T46] gspca_zc3xx: reg_r err -71 [ 550.637184][ T46] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 550.674130][ T46] usb 4-1: USB disconnect, device number 96 [ 551.189082][T13807] gtp0: entered promiscuous mode [ 551.208006][T13807] gtp0: entered allmulticast mode [ 551.250712][T13809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1614'. [ 551.317856][ T46] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 551.458595][T13811] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 551.512001][T13815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.521306][ T46] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 551.545551][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.554683][T13815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.575161][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.604574][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.639190][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.657682][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.674369][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.699253][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 551.712328][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.743348][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.765172][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.774537][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.789469][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.801123][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.823222][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.842231][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.853611][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.870927][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.881263][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.892600][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.902749][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.911916][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.925260][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.943402][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.955000][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.973262][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 551.997509][ T46] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 552.009050][ T46] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 552.018378][ T46] usb 2-1: Product: syz [ 552.023097][ T46] usb 2-1: Manufacturer: syz [ 552.033132][ T46] usb 2-1: SerialNumber: syz [ 552.052806][ T46] usb 2-1: config 0 descriptor?? [ 552.071147][ T46] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 552.177402][T13823] trusted_key: encrypted_key: key user:syz not found [ 552.201522][T13823] netlink: 'syz.3.1619': attribute type 11 has an invalid length. [ 552.216970][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 552.357023][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 552.365574][ T1184] usb 2-1: USB disconnect, device number 101 [ 552.380704][ T1184] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 552.514684][T13833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.537580][T13833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.579129][T13804] netlink: 'syz.1.1612': attribute type 3 has an invalid length. [ 552.601674][T13833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.605859][T13804] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1612'. [ 552.621723][T13833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.221087][T13840] futex_wake_op: syz.3.1625 tries to shift op by -1; fix this program [ 553.377945][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1627'. [ 553.630745][T13850] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 553.945238][ T5338] usb 5-1: unable to get BOS descriptor or descriptor too short [ 554.002148][ T5338] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 554.025212][ T5338] usb 5-1: chopping to 0 config(s) [ 554.055897][ T5338] usb 5-1: can't read configurations, error -32 [ 554.184283][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 554.228753][ T5338] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 554.300155][ T3003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.395085][ T2637] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 554.405097][ T5338] usb 5-1: device descriptor read/64, error -32 [ 554.468968][ T3003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.535076][ T5338] usb usb5-port1: attempt power cycle [ 554.604437][ T2637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.615997][ T2637] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.627054][ T3003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.635243][ T2637] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 554.661906][ T2637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.678302][ T2637] usb 4-1: config 0 descriptor?? [ 554.753961][ T3003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.925604][ T46] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 554.964949][ T5338] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 555.029413][ T5338] usb 5-1: device descriptor read/8, error -32 [ 555.050602][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 555.062007][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 555.071000][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 555.083177][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 555.087418][ T3003] bridge_slave_1: left allmulticast mode [ 555.101437][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 555.105330][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 555.115935][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.116993][ T3003] bridge_slave_1: left promiscuous mode [ 555.160320][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.162138][ T46] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.179149][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.234483][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.253675][ T3003] bridge_slave_0: left allmulticast mode [ 555.259532][ T3003] bridge_slave_0: left promiscuous mode [ 555.265796][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.276568][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 555.296101][ T2637] logitech-djreceiver 0003:046D:C539.0034: item fetching failed at offset 3/5 [ 555.315018][ T5338] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 555.321999][ T46] usb 3-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 555.339081][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.352553][ T2637] logitech-djreceiver 0003:046D:C539.0034: logi_dj_probe: parse failed [ 555.369650][ T46] usb 3-1: Product: 䴘ϓ䁉쯽ἂ瑞ﴐ㾸焟᰸髗㍮ǧ길ㅚ吓觰屮뗫盁ￖ쌫뵎ﲮ纳茰版硬俀흨⮗頩伡㵳톼驢ꮵ랰왽魑箸쩰릗錉⤫ [ 555.374870][ T5338] usb 5-1: device descriptor read/8, error -32 [ 555.394106][ T2637] logitech-djreceiver 0003:046D:C539.0034: probe with driver logitech-djreceiver failed with error -22 [ 555.431349][ T46] usb 3-1: Manufacturer: 倊 [ 555.445308][ T46] usb 3-1: SerialNumber: 䘮픭ﳽ뇌曗휂級穐ヒ異ᙒ٬矘큀뽓礥쇺⽃迹Ꮠ舧尭Ӿ煎濗멎鬹ࠗ㷺ꓐ玿雸 [ 555.547111][ T5338] usb usb5-port1: unable to enumerate USB device [ 555.579601][T13889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.595861][T13889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.714235][ T46] usbhid 3-1:1.0: can't add hid device: -71 [ 555.735443][ T46] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 555.769968][ T46] usb 3-1: USB disconnect, device number 94 [ 556.114647][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.129041][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.141907][ T3003] bond0 (unregistering): Released all slaves [ 556.189762][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1635'. [ 556.206461][ T5318] usb 4-1: USB disconnect, device number 97 [ 556.466848][ T5318] usb 1-1: USB disconnect, device number 62 [ 556.581061][T13881] chnl_net:caif_netlink_parms(): no params data found [ 557.121098][ T3003] hsr_slave_0: left promiscuous mode [ 557.147313][ T3003] hsr_slave_1: left promiscuous mode [ 557.178208][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.197185][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.225326][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.227120][ T5231] Bluetooth: hci3: command tx timeout [ 557.255616][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.430291][ T3003] veth1_macvtap: left promiscuous mode [ 557.460059][ T3003] veth0_macvtap: left promiscuous mode [ 557.485451][ T3003] veth1_vlan: left promiscuous mode [ 557.503192][ T3003] veth0_vlan: left promiscuous mode [ 557.547601][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 557.563501][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 557.574551][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 557.586084][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 557.594412][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 557.602371][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 558.200640][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 558.250260][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 558.717407][T13881] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.724693][T13881] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.733781][T13881] bridge_slave_0: entered allmulticast mode [ 558.741761][T13881] bridge_slave_0: entered promiscuous mode [ 558.890983][T13881] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.909534][T13881] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.935353][T13881] bridge_slave_1: entered allmulticast mode [ 558.942706][T13881] bridge_slave_1: entered promiscuous mode [ 559.172755][T13881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.293296][T13881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.306978][ T5231] Bluetooth: hci3: command tx timeout [ 559.375562][T13881] team0: Port device team_slave_0 added [ 559.406111][T13881] team0: Port device team_slave_1 added [ 559.535507][T13881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.542496][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.546106][ T3003] IPVS: stop unused estimator thread 0... [ 559.576193][ T5318] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 559.623716][T13881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.655938][T13881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.662934][T13881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.691682][T13881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.709482][ T5231] Bluetooth: hci2: command tx timeout [ 559.787557][ T5318] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.815286][ T5318] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.863183][ T5318] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.882729][T13939] chnl_net:caif_netlink_parms(): no params data found [ 559.890012][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.924169][ T5318] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.951299][ T5318] usb 3-1: invalid MIDI out EP 0 [ 560.034054][ T3003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.077333][ T5318] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 560.129797][T13881] hsr_slave_0: entered promiscuous mode [ 560.156015][T13881] hsr_slave_1: entered promiscuous mode [ 560.163091][T13881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.170844][T13881] Cannot create hsr debugfs directory [ 560.198950][ T3003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.269046][ T3003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.317956][T13932] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.324323][T13932] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 560.371419][T13932] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.371835][T13939] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.385453][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.392670][T13932] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 560.392678][T13939] bridge_slave_0: entered allmulticast mode [ 560.393974][T13939] bridge_slave_0: entered promiscuous mode [ 560.417724][T13939] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.431723][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.439908][T13939] bridge_slave_1: entered allmulticast mode [ 560.448941][T13939] bridge_slave_1: entered promiscuous mode [ 560.472306][ T3003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.623412][T13939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.639809][T13939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.809809][T13939] team0: Port device team_slave_0 added [ 560.820272][T13939] team0: Port device team_slave_1 added [ 560.977012][T13932] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.982962][T13932] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 561.138761][T13939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.146137][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.172652][T13939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.186576][T13939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.193629][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.220712][T13939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.315202][ T1184] usb 3-1: USB disconnect, device number 95 [ 561.412903][ T3003] bridge_slave_1: left allmulticast mode [ 561.427303][ T3003] bridge_slave_1: left promiscuous mode [ 561.433122][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.442962][ T3003] bridge_slave_0: left allmulticast mode [ 561.448863][ T3003] bridge_slave_0: left promiscuous mode [ 561.454570][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.783133][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.785110][ T5231] Bluetooth: hci2: command tx timeout [ 561.803005][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.813855][ T3003] bond0 (unregistering): Released all slaves [ 561.859851][T13939] hsr_slave_0: entered promiscuous mode [ 561.909227][T13939] hsr_slave_1: entered promiscuous mode [ 561.953303][T13939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.961285][T13939] Cannot create hsr debugfs directory [ 562.142941][T13881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.186119][T13939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.207668][T13881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.218397][T13881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.231434][T13881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.297200][T13939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.390227][T13939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.433164][T13881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.498358][T13939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.537170][T13881] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.576313][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.583477][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.611301][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.618516][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.751669][T13881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.777260][T13939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.803062][T13939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.815174][T13939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.834002][T13939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.864394][T13881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.990153][T13881] veth0_vlan: entered promiscuous mode [ 563.047040][T13881] veth1_vlan: entered promiscuous mode [ 563.092098][T13939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.137205][T13881] veth0_macvtap: entered promiscuous mode [ 563.156500][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.160963][T13939] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.162815][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.184432][T13881] veth1_macvtap: entered promiscuous mode [ 563.197959][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.205169][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.229627][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.236820][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.286753][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.309055][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.324496][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.335898][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.345780][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.356340][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.366820][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.377336][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.387529][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.399113][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.410749][T13881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.443173][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.454008][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.467169][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.477872][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.487798][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.498497][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.508835][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.519832][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.529801][T13881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.540339][T13881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.552834][T13881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.575622][T13881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.584368][T13881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.593640][T13881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.604398][T13881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.701950][T13939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.760207][T13939] veth0_vlan: entered promiscuous mode [ 563.772951][T13939] veth1_vlan: entered promiscuous mode [ 563.838596][T13939] veth0_macvtap: entered promiscuous mode [ 563.852579][T13939] veth1_macvtap: entered promiscuous mode [ 563.865708][ T5231] Bluetooth: hci2: command tx timeout [ 563.902628][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.915519][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.934454][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.956190][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.972551][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.983551][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.993494][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.004094][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.014053][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.027415][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.037358][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.047954][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.059888][T13939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.081796][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.098566][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.110287][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.121201][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.131363][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.142384][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.153067][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.163957][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.174890][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.187176][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.206034][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.224142][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.237005][T13939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.276782][T13939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.297665][T13939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.312375][T13939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.322951][T13939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.953169][ T5231] Bluetooth: hci2: command tx timeout [ 624.590090][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.596623][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.984910][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 686.037259][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.043606][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 707.144856][ T30] INFO: task kworker/1:1:46 blocked for more than 143 seconds. [ 707.152452][ T30] Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 707.167706][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.181122][ T30] task:kworker/1:1 state:D stack:19472 pid:46 tgid:46 ppid:2 flags:0x00004000 [ 707.191473][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 707.201661][ T30] Call Trace: [ 707.205234][ T30] [ 707.208187][ T30] __schedule+0x1800/0x4a60 [ 707.212732][ T30] ? __pfx___schedule+0x10/0x10 [ 707.223934][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.230476][ T30] ? __pfx_lock_release+0x10/0x10 [ 707.235667][ T30] ? kick_pool+0x1bd/0x620 [ 707.240102][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.245628][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 707.250850][ T30] ? schedule+0x90/0x320 [ 707.255231][ T30] schedule+0x14b/0x320 [ 707.259399][ T30] schedule_preempt_disabled+0x13/0x30 [ 707.265281][ T30] __mutex_lock+0x6a4/0xd70 [ 707.269802][ T30] ? __mutex_lock+0x527/0xd70 [ 707.274462][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 707.281152][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 707.286741][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.292753][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.299136][ T30] ? process_scheduled_works+0x945/0x1830 [ 707.305314][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 707.311401][ T30] ? process_scheduled_works+0x945/0x1830 [ 707.317209][ T30] process_scheduled_works+0xa2c/0x1830 [ 707.322779][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.328820][ T30] ? assign_work+0x364/0x3d0 [ 707.333423][ T30] worker_thread+0x86d/0xd10 [ 707.338049][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 707.343953][ T30] ? __kthread_parkme+0x169/0x1d0 [ 707.349019][ T30] ? __pfx_worker_thread+0x10/0x10 [ 707.354138][ T30] kthread+0x2f0/0x390 [ 707.358240][ T30] ? __pfx_worker_thread+0x10/0x10 [ 707.363381][ T30] ? __pfx_kthread+0x10/0x10 [ 707.368015][ T30] ret_from_fork+0x4b/0x80 [ 707.372443][ T30] ? __pfx_kthread+0x10/0x10 [ 707.377075][ T30] ret_from_fork_asm+0x1a/0x30 [ 707.381855][ T30] [ 707.384999][ T30] INFO: task kworker/u8:9:3003 blocked for more than 143 seconds. [ 707.392805][ T30] Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 707.400470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.409186][ T30] task:kworker/u8:9 state:D stack:20136 pid:3003 tgid:3003 ppid:2 flags:0x00004000 [ 707.419404][ T30] Workqueue: netns cleanup_net [ 707.424188][ T30] Call Trace: [ 707.427525][ T30] [ 707.430477][ T30] __schedule+0x1800/0x4a60 [ 707.435068][ T30] ? __pfx___schedule+0x10/0x10 [ 707.439942][ T30] ? __pfx_lock_release+0x10/0x10 [ 707.445025][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 707.450489][ T30] ? kthread_data+0x52/0xd0 [ 707.455031][ T30] ? schedule+0x90/0x320 [ 707.459290][ T30] ? wq_worker_sleeping+0x66/0x240 [ 707.464412][ T30] ? schedule+0x90/0x320 [ 707.469205][ T30] schedule+0x14b/0x320 [ 707.473383][ T30] schedule_preempt_disabled+0x13/0x30 [ 707.478908][ T30] __mutex_lock+0x6a4/0xd70 [ 707.483417][ T30] ? kobject_put+0x446/0x480 [ 707.488042][ T30] ? __mutex_lock+0x527/0xd70 [ 707.493510][ T30] ? rfkill_unregister+0xd0/0x230 [ 707.498581][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 707.503611][ T30] ? __pfx_device_del+0x10/0x10 [ 707.508529][ T30] rfkill_unregister+0xd0/0x230 [ 707.513391][ T30] wiphy_unregister+0x22a/0xb00 [ 707.518288][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 707.524191][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 707.529625][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 707.535308][ T30] ? kfree+0x149/0x360 [ 707.539397][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 707.545286][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 707.550954][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 707.557105][ T30] hwsim_exit_net+0x5c1/0x670 [ 707.561802][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 707.567085][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 707.572904][ T30] cleanup_net+0x802/0xcc0 [ 707.577383][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 707.582330][ T30] ? process_scheduled_works+0x945/0x1830 [ 707.588084][ T30] process_scheduled_works+0xa2c/0x1830 [ 707.593653][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.599685][ T30] ? assign_work+0x364/0x3d0 [ 707.604288][ T30] worker_thread+0x86d/0xd10 [ 707.608942][ T30] ? __kthread_parkme+0x169/0x1d0 [ 707.613981][ T30] ? __pfx_worker_thread+0x10/0x10 [ 707.619139][ T30] kthread+0x2f0/0x390 [ 707.623225][ T30] ? __pfx_worker_thread+0x10/0x10 [ 707.628432][ T30] ? __pfx_kthread+0x10/0x10 [ 707.633031][ T30] ret_from_fork+0x4b/0x80 [ 707.637486][ T30] ? __pfx_kthread+0x10/0x10 [ 707.642085][ T30] ret_from_fork_asm+0x1a/0x30 [ 707.646918][ T30] [ 707.649969][ T30] INFO: task syz-executor:13331 blocked for more than 143 seconds. [ 707.657910][ T30] Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 707.665570][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.674241][ T30] task:syz-executor state:D stack:23648 pid:13331 tgid:13331 ppid:5219 flags:0x20004002 [ 707.684475][ T30] Call Trace: [ 707.687907][ T30] [ 707.690848][ T30] __schedule+0x1800/0x4a60 [ 707.695430][ T30] ? __pfx___schedule+0x10/0x10 [ 707.700288][ T30] ? __pfx_lock_release+0x10/0x10 [ 707.706031][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 707.711527][ T30] ? schedule+0x90/0x320 [ 707.715833][ T30] schedule+0x14b/0x320 [ 707.720011][ T30] schedule_preempt_disabled+0x13/0x30 [ 707.725577][ T30] __mutex_lock+0x6a4/0xd70 [ 707.730114][ T30] ? kobject_put+0x446/0x480 [ 707.734695][ T30] ? __mutex_lock+0x527/0xd70 [ 707.739445][ T30] ? rfkill_unregister+0xd0/0x230 [ 707.744581][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 707.749682][ T30] ? __pfx_device_del+0x10/0x10 [ 707.754532][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 707.759804][ T30] rfkill_unregister+0xd0/0x230 [ 707.764769][ T30] hci_unregister_dev+0x366/0x510 [ 707.769854][ T30] vhci_release+0x83/0xd0 [ 707.774200][ T30] ? __pfx_vhci_release+0x10/0x10 [ 707.779294][ T30] __fput+0x24a/0x8a0 [ 707.783306][ T30] task_work_run+0x24f/0x310 [ 707.788029][ T30] ? __pfx_task_work_run+0x10/0x10 [ 707.793160][ T30] ? switch_task_namespaces+0xe4/0x110 [ 707.798863][ T30] do_exit+0xa2f/0x27f0 [ 707.803109][ T30] ? __pfx_do_exit+0x10/0x10 [ 707.807731][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.813744][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.820134][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.825387][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 707.830609][ T30] do_group_exit+0x207/0x2c0 [ 707.835266][ T30] __ia32_sys_exit_group+0x3f/0x40 [ 707.840395][ T30] ia32_sys_call+0x2624/0x2630 [ 707.845223][ T30] __do_fast_syscall_32+0xb4/0x110 [ 707.850354][ T30] ? exc_page_fault+0x590/0x8c0 [ 707.855272][ T30] do_fast_syscall_32+0x34/0x80 [ 707.860129][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 707.866580][ T30] RIP: 0023:0xf7f84579 [ 707.870667][ T30] RSP: 002b:00000000ffa070cc EFLAGS: 00000206 ORIG_RAX: 00000000000000fc [ 707.879177][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000004 [ 707.887176][ T30] RDX: 0000000000000000 RSI: 00000000f715dc40 RDI: 00000000f756ffc0 [ 707.895201][ T30] RBP: 0000000030000000 R08: 0000000000000000 R09: 0000000000000000 [ 707.903235][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 707.911271][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 707.919290][ T30] [ 707.922312][ T30] INFO: task syz-executor:13881 blocked for more than 144 seconds. [ 707.930250][ T30] Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 707.937903][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.946831][ T30] task:syz-executor state:D stack:20704 pid:13881 tgid:13881 ppid:13870 flags:0x20000000 [ 707.957078][ T30] Call Trace: [ 707.960371][ T30] [ 707.963309][ T30] __schedule+0x1800/0x4a60 [ 707.967921][ T30] ? __pfx___schedule+0x10/0x10 [ 707.972796][ T30] ? __pfx_lock_release+0x10/0x10 [ 707.977916][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 707.983391][ T30] ? schedule+0x90/0x320 [ 707.987687][ T30] schedule+0x14b/0x320 [ 707.991935][ T30] schedule_preempt_disabled+0x13/0x30 [ 707.997445][ T30] __mutex_lock+0x6a4/0xd70 [ 708.001962][ T30] ? __mutex_lock+0x527/0xd70 [ 708.006687][ T30] ? rfkill_fop_open+0x131/0x850 [ 708.011638][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 708.016698][ T30] ? __init_waitqueue_head+0xae/0x150 [ 708.022062][ T30] rfkill_fop_open+0x131/0x850 [ 708.026986][ T30] ? module_put+0x13a/0x2d0 [ 708.031688][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 708.037041][ T30] misc_open+0x313/0x390 [ 708.041299][ T30] chrdev_open+0x5b0/0x630 [ 708.045763][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 708.050710][ T30] ? security_file_open+0x51a/0x750 [ 708.055959][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 708.060906][ T30] do_dentry_open+0x970/0x1440 [ 708.065756][ T30] vfs_open+0x3e/0x330 [ 708.069852][ T30] path_openat+0x2b3e/0x3470 [ 708.074452][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 708.079863][ T30] ? __lock_acquire+0x137a/0x2040 [ 708.084954][ T30] ? __pfx_path_openat+0x10/0x10 [ 708.089929][ T30] do_filp_open+0x235/0x490 [ 708.094447][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 708.099590][ T30] ? _raw_spin_unlock+0x28/0x50 [ 708.104454][ T30] ? alloc_fd+0x5a1/0x640 [ 708.111013][ T30] do_sys_openat2+0x13e/0x1d0 [ 708.116847][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 708.122085][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 708.128191][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 708.133755][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 708.139971][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 708.146631][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 708.151853][ T30] __do_fast_syscall_32+0xb4/0x110 [ 708.157138][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.163319][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 708.168861][ T30] do_fast_syscall_32+0x34/0x80 [ 708.173916][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.180484][ T30] RIP: 0023:0xf7f94579 [ 708.184577][ T30] RSP: 002b:00000000f757fec0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 708.193058][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f730be8a [ 708.201099][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7420ff4 [ 708.209143][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 708.217186][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.225218][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.233221][ T30] [ 708.236337][ T30] INFO: task syz.3.1650:13927 blocked for more than 144 seconds. [ 708.244063][ T30] Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 708.251725][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.260430][ T30] task:syz.3.1650 state:D stack:26456 pid:13927 tgid:13927 ppid:13125 flags:0x20004006 [ 708.270934][ T30] Call Trace: [ 708.274230][ T30] [ 708.277218][ T30] __schedule+0x1800/0x4a60 [ 708.281750][ T30] ? __pfx___schedule+0x10/0x10 [ 708.286658][ T30] ? __pfx_lock_release+0x10/0x10 [ 708.291695][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 708.297205][ T30] ? schedule+0x90/0x320 [ 708.301458][ T30] schedule+0x14b/0x320 [ 708.305668][ T30] schedule_preempt_disabled+0x13/0x30 [ 708.311151][ T30] __mutex_lock+0x6a4/0xd70 [ 708.315739][ T30] ? kobject_put+0x446/0x480 [ 708.320346][ T30] ? __mutex_lock+0x527/0xd70 [ 708.325073][ T30] ? rfkill_unregister+0xd0/0x230 [ 708.330106][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 708.335185][ T30] ? __pfx_device_del+0x10/0x10 [ 708.340054][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 708.346162][ T30] rfkill_unregister+0xd0/0x230 [ 708.351041][ T30] nfc_unregister_device+0x96/0x2a0 [ 708.356300][ T30] virtual_ncidev_close+0x59/0x90 [ 708.361342][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 708.367116][ T30] __fput+0x24a/0x8a0 [ 708.371116][ T30] task_work_run+0x24f/0x310 [ 708.375753][ T30] ? __pfx_task_work_run+0x10/0x10 [ 708.380874][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 708.386644][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 708.392289][ T30] __do_fast_syscall_32+0xc4/0x110 [ 708.397453][ T30] ? exc_page_fault+0x590/0x8c0 [ 708.402319][ T30] do_fast_syscall_32+0x34/0x80 [ 708.407232][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.413574][ T30] RIP: 0023:0xf7fb3579 [ 708.417693][ T30] RSP: 002b:00000000f759fb2c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 708.426546][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 708.434530][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.442557][ T30] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 708.450559][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.458567][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.466597][ T30] [ 708.469620][ T30] INFO: task syz.3.1650:13932 blocked for more than 144 seconds. [ 708.477395][ T30] Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 708.485153][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.493918][ T30] task:syz.3.1650 state:D stack:22136 pid:13932 tgid:13927 ppid:13125 flags:0x20004006 [ 708.504139][ T30] Call Trace: [ 708.508202][ T30] [ 708.511158][ T30] __schedule+0x1800/0x4a60 [ 708.515749][ T30] ? __pfx___schedule+0x10/0x10 [ 708.520622][ T30] ? __pfx_lock_release+0x10/0x10 [ 708.525813][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 708.531304][ T30] ? schedule+0x90/0x320 [ 708.535645][ T30] schedule+0x14b/0x320 [ 708.539818][ T30] schedule_preempt_disabled+0x13/0x30 [ 708.545354][ T30] __mutex_lock+0x6a4/0xd70 [ 708.549880][ T30] ? __mutex_lock+0x527/0xd70 [ 708.554563][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 708.559875][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 708.564948][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 708.570167][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 708.576113][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 708.582464][ T30] nfc_rfkill_set_block+0x50/0x310 [ 708.587796][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 708.593638][ T30] rfkill_set_block+0x1f1/0x440 [ 708.598532][ T30] rfkill_fop_write+0x5bb/0x790 [ 708.603390][ T30] ? common_file_perm+0x1a6/0x210 [ 708.608461][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 708.613839][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 708.619244][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 708.624198][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 708.629620][ T30] vfs_write+0x2a2/0xc90 [ 708.633889][ T30] ? __pfx_vfs_write+0x10/0x10 [ 708.638697][ T30] ? do_futex+0x33b/0x560 [ 708.643047][ T30] ? __fget_files+0x29/0x470 [ 708.647703][ T30] ? __fget_files+0x3f6/0x470 [ 708.652384][ T30] ? __fget_files+0x29/0x470 [ 708.657049][ T30] ksys_write+0x1a0/0x2c0 [ 708.661388][ T30] ? __pfx_ksys_write+0x10/0x10 [ 708.666324][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 708.672939][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 708.678274][ T30] __do_fast_syscall_32+0xb4/0x110 [ 708.683395][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 708.688381][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 708.693595][ T30] do_fast_syscall_32+0x34/0x80 [ 708.698486][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.704863][ T30] RIP: 0023:0xf7fb3579 [ 708.708959][ T30] RSP: 002b:00000000f573556c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 708.717451][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 708.725466][ T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 708.733464][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.741473][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 708.749787][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.757889][ T30] [ 708.760950][ T30] [ 708.760950][ T30] Showing all locks held in the system: [ 708.768707][ T30] 1 lock held by khungtaskd/30: [ 708.773563][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 708.783504][ T30] 3 locks held by kworker/1:1/46: [ 708.788637][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 708.799644][ T30] #1: ffffc90000b67d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 708.813172][ T30] #2: ffffffff8ff61b08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 708.824566][ T30] 4 locks held by kworker/u8:9/3003: [ 708.829900][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 708.840859][ T30] #1: ffffc90009fa7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 708.851437][ T30] #2: ffffffff8fc7da90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 708.860884][ T30] #3: ffffffff8ff61b08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 708.871174][ T30] 2 locks held by getty/4989: [ 708.875929][ T30] #0: ffff88802f59a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 708.885744][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 708.895923][ T30] 1 lock held by syz-executor/13331: [ 708.901230][ T30] #0: ffffffff8ff61b08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 708.911378][ T30] 2 locks held by syz-executor/13881: [ 708.916767][ T30] #0: ffffffff8f145568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 708.925342][ T30] #1: ffffffff8ff61b08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 708.935435][ T30] 2 locks held by syz.3.1650/13927: [ 708.940612][ T30] #0: ffff88805f8d8100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 708.950417][ T30] #1: ffffffff8ff61b08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 708.960571][ T30] 2 locks held by syz.3.1650/13932: [ 708.965805][ T30] #0: ffffffff8ff61b08 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 708.975961][ T30] #1: ffff88805f8d8100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 708.985664][ T30] 1 lock held by syz-executor/13939: [ 708.990953][ T30] #0: ffffffff8f145568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 708.999465][ T30] [ 709.001775][ T30] ============================================= [ 709.001775][ T30] [ 709.010317][ T30] NMI backtrace for cpu 0 [ 709.014650][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 709.025151][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 709.035200][ T30] Call Trace: [ 709.038470][ T30] [ 709.041393][ T30] dump_stack_lvl+0x241/0x360 [ 709.046080][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.051277][ T30] ? __pfx__printk+0x10/0x10 [ 709.055859][ T30] ? vprintk_emit+0x667/0x7c0 [ 709.060528][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 709.065726][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 709.070661][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 709.076110][ T30] ? _printk+0xd5/0x120 [ 709.080259][ T30] ? __pfx__printk+0x10/0x10 [ 709.084841][ T30] ? __wake_up_klogd+0xcc/0x110 [ 709.089687][ T30] ? __pfx__printk+0x10/0x10 [ 709.094275][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 709.100248][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 709.106222][ T30] watchdog+0xff4/0x1040 [ 709.110461][ T30] ? watchdog+0x1ea/0x1040 [ 709.114873][ T30] ? __pfx_watchdog+0x10/0x10 [ 709.119543][ T30] kthread+0x2f0/0x390 [ 709.123695][ T30] ? __pfx_watchdog+0x10/0x10 [ 709.128364][ T30] ? __pfx_kthread+0x10/0x10 [ 709.132954][ T30] ret_from_fork+0x4b/0x80 [ 709.137366][ T30] ? __pfx_kthread+0x10/0x10 [ 709.141951][ T30] ret_from_fork_asm+0x1a/0x30 [ 709.146721][ T30] [ 709.150134][ T30] Sending NMI from CPU 0 to CPUs 1: [ 709.155398][ C1] NMI backtrace for cpu 1 [ 709.155410][ C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:5 Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 709.155430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 709.155440][ C1] Workqueue: events nsim_dev_trap_report_work [ 709.155465][ C1] RIP: 0010:__lock_acquire+0x321/0x2040 [ 709.155488][ C1] Code: d8 48 c1 e8 03 48 89 44 24 20 0f b6 04 30 84 c0 48 89 6c 24 08 0f 85 51 14 00 00 4c 8b a4 24 d0 00 00 00 b8 00 e0 ff ff 23 03 <41> 81 e0 ff 1f 00 00 44 09 c0 48 89 5c 24 10 89 03 49 8d 5c e9 08 [ 709.155502][ C1] RSP: 0018:ffffc90004047550 EFLAGS: 00000006 [ 709.155515][ C1] RAX: 00000000000c0000 RBX: ffff88805fd6e5c8 RCX: ffffffff94f38903 [ 709.155528][ C1] RDX: 0000000000000005 RSI: dffffc0000000000 RDI: 000000000000002c [ 709.155540][ C1] RBP: 0000000000000019 R08: 000000000000002c R09: ffff88805fd6e4e0 [ 709.155551][ C1] R10: dffffc0000000000 R11: fffffbfff2030ad6 R12: ffffffff81ef9430 [ 709.155563][ C1] R13: ffff88805fd6e5a0 R14: 0000000000000000 R15: ffff8880b9342c80 [ 709.155575][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 709.155589][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.155600][ C1] CR2: 000055e2dd0f93d8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 709.155615][ C1] Call Trace: [ 709.155622][ C1] [ 709.155629][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 709.155647][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 709.155667][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 709.155691][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 709.155709][ C1] ? nmi_handle+0x14f/0x5a0 [ 709.155724][ C1] ? nmi_handle+0x2a/0x5a0 [ 709.155739][ C1] ? __lock_acquire+0x321/0x2040 [ 709.155758][ C1] ? default_do_nmi+0x63/0x160 [ 709.155775][ C1] ? exc_nmi+0x123/0x1f0 [ 709.155797][ C1] ? end_repeat_nmi+0xf/0x53 [ 709.155815][ C1] ? put_cpu_partial+0x70/0x250 [ 709.155837][ C1] ? __lock_acquire+0x321/0x2040 [ 709.155856][ C1] ? __lock_acquire+0x321/0x2040 [ 709.155876][ C1] ? __lock_acquire+0x321/0x2040 [ 709.155895][ C1] [ 709.155900][ C1] [ 709.155913][ C1] lock_acquire+0x1ed/0x550 [ 709.155931][ C1] ? put_cpu_partial+0x70/0x250 [ 709.155953][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 709.155971][ C1] ? put_cpu_partial+0x70/0x250 [ 709.155989][ C1] ? __pfx_lock_release+0x10/0x10 [ 709.156011][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 709.156033][ C1] put_cpu_partial+0x91/0x250 [ 709.156051][ C1] ? put_cpu_partial+0x70/0x250 [ 709.156068][ C1] ? put_cpu_partial+0x70/0x250 [ 709.156087][ C1] get_partial_node+0xd6/0x280 [ 709.156109][ C1] ___slab_alloc+0xc17/0x14b0 [ 709.156128][ C1] ? __alloc_skb+0x1f3/0x440 [ 709.156146][ C1] ? __alloc_skb+0x1f3/0x440 [ 709.156161][ C1] __slab_alloc+0x58/0xa0 [ 709.156179][ C1] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 709.156196][ C1] ? __alloc_skb+0x1f3/0x440 [ 709.156213][ C1] ? __alloc_skb+0x1f3/0x440 [ 709.156228][ C1] kmalloc_reserve+0x111/0x2a0 [ 709.156245][ C1] __alloc_skb+0x1f3/0x440 [ 709.156260][ C1] ? __pfx_lock_release+0x10/0x10 [ 709.156280][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 709.156295][ C1] ? do_raw_spin_unlock+0x70/0x8b0 [ 709.156313][ C1] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 709.156335][ C1] nsim_dev_trap_report_work+0x254/0xaa0 [ 709.156362][ C1] ? process_scheduled_works+0x945/0x1830 [ 709.156380][ C1] process_scheduled_works+0xa2c/0x1830 [ 709.156409][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 709.156431][ C1] ? assign_work+0x364/0x3d0 [ 709.156450][ C1] worker_thread+0x86d/0xd10 [ 709.156472][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 709.156493][ C1] ? __kthread_parkme+0x169/0x1d0 [ 709.156513][ C1] ? __pfx_worker_thread+0x10/0x10 [ 709.156531][ C1] kthread+0x2f0/0x390 [ 709.156551][ C1] ? __pfx_worker_thread+0x10/0x10 [ 709.156569][ C1] ? __pfx_kthread+0x10/0x10 [ 709.156589][ C1] ret_from_fork+0x4b/0x80 [ 709.156608][ C1] ? __pfx_kthread+0x10/0x10 [ 709.156628][ C1] ret_from_fork_asm+0x1a/0x30 [ 709.156653][ C1] [ 709.182163][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 709.182180][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00081-gd5d547aa7b51 #0 [ 709.182201][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 709.182212][ T30] Call Trace: [ 709.182221][ T30] [ 709.182229][ T30] dump_stack_lvl+0x241/0x360 [ 709.182262][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.182286][ T30] ? __pfx__printk+0x10/0x10 [ 709.182307][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 709.182337][ T30] ? vscnprintf+0x5d/0x90 [ 709.182358][ T30] panic+0x349/0x860 [ 709.182381][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 709.182403][ T30] ? __pfx_panic+0x10/0x10 [ 709.182423][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 709.182443][ T30] ? __irq_work_queue_local+0x137/0x410 [ 709.182467][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 709.182486][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 709.182505][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 709.182527][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 709.182550][ T30] watchdog+0x1033/0x1040 [ 709.182574][ T30] ? watchdog+0x1ea/0x1040 [ 709.182602][ T30] ? __pfx_watchdog+0x10/0x10 [ 709.182623][ T30] kthread+0x2f0/0x390 [ 709.182646][ T30] ? __pfx_watchdog+0x10/0x10 [ 709.182667][ T30] ? __pfx_kthread+0x10/0x10 [ 709.182691][ T30] ret_from_fork+0x4b/0x80 [ 709.182713][ T30] ? __pfx_kthread+0x10/0x10 [ 709.182737][ T30] ret_from_fork_asm+0x1a/0x30 [ 709.182771][ T30] [ 709.190120][ T30] Kernel Offset: disabled [ 709.714933][ T30] Rebooting in 86400 seconds..