last executing test programs: 21.012175432s ago: executing program 0 (id=775): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) personality(0x400000b) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x1000000000000000, 0x0, 0x90000}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) 20.961981086s ago: executing program 0 (id=776): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x7) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1409, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4015}, 0x4020) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x9e2}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64, @ANYRES8=r2, @ANYRES8=r3], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20.846814934s ago: executing program 0 (id=777): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x931, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r4, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r5, 0x10d, 0x93, &(0x7f0000000000), &(0x7f0000000080)=0x4) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x8340}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0, 0x0, 0x0, 0x20}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.576130493s ago: executing program 0 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mount$fuse(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000100)=0xffff, 0x4) 20.227804387s ago: executing program 0 (id=783): r0 = socket(0x1e, 0x5, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) flock(r1, 0x1) (async) write$UHID_CREATE2(r1, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xd8, 0x0, 0x9, 0x9, 0x4, 0x7fff, "b5a0deeb124446f5000cbe30479c4726196a5eee11b2735541e643a10b8a7bf7d317219887bf04fd9c40a4ed5e6b53ed5dcb7c40e860bc2159ac4cb774a5b0f21fed82503c272ee3f8281fecd1813295780624f16ca2c036f5b3c6db279114e98f330a1df811dd110c05c6e12c1b1193161ea41bbd223826b67a3c88b5903e313580c6e5636c93f4301c69e024fbb769915d34ca5ae5a2ab2f961f71543b9ccd87e0ee95df9e2bfa55e05153b9bca1377c11b8ffe5d92bb52a8094a94ce163cdb6006a348b7f4fe233e685a9ba57819b0ac08f651c7f6c46"}}, 0x1f0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, &(0x7f0000000680)=""/3, 0x3}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[], 0x138}}, 0x0) 19.739960766s ago: executing program 0 (id=790): r0 = memfd_secret(0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x75d2622b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109b000000000006000000000000009521000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x1c}}, 0x4000001) listen(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16], 0x40}}, 0x4000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000077d, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x88141, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x301100, 0x0) fchdir(r4) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x1b8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) timerfd_create(0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$kcm(0xa, 0x3, 0x3a) epoll_wait(r2, &(0x7f0000000280)=[{}, {}, {}], 0x3, 0x2ef7) 16.836468108s ago: executing program 3 (id=805): set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b050600f4ff020006004788aa96a13bb1000011000086dd1a12", 0x1001a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 16.662365982s ago: executing program 3 (id=806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[], 0x1c}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1401000016000100000000000003000000000000000000000000000000000000fc00000000000000000000000000000000005f00000000000000000000001a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000001000000003200000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000001c0004000000000000000000ffffffff00"/203], 0x114}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/132, 0x84, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000001400)={0x53, 0x0, 0x0, 0x0, @scatter={0x26, 0x0, 0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0xffffff59, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x100000000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r11 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r11, 0xc0106407, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x61}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000000000f000b00253500000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200001400fe00e5297f432bd5b608b60c7484246c3c430600fd0000000000140055"], 0x58}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000067c89ee5061de5ad0ebb873606e570b7f2f6d113f6fa6574f10ccba3fbe2f73ae5629b34e88e4d1f3bcd67cbaeef1db22beab9f86ab460dab1bca5bfe6aff4d202631a3f26fcf87139994cc7352a93bc664728654e312fedb77b72fbbc293e070064f2510bc0898a8b4222d2cf8454134b2c5b7321", @ANYRES16=r4, @ANYBLOB="10002bbd7000fbdbdf257200000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040041}, 0x44004044) r13 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r13, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r14, &(0x7f00000001c0)=[{&(0x7f0000000480)="9b", 0x1}], 0x1, 0x0, 0x0) 15.523972164s ago: executing program 2 (id=810): r0 = socket(0x29, 0x5, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x226, 0x0, @private2, @mcast2={0xff, 0x5}}}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x10b201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000001c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) close_range(0xffffffffffffffff, r4, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000034c0)={@cgroup, 0xffffffffffffffff, 0xa, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd5, 0xb6, 0xc1, 0x8, 0x1870, 0x1, 0xe67f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x408d00, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f0000001200)={0xb6, 0x0, 0x7fffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304944) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, 0x0) listen(r7, 0x0) 15.268046709s ago: executing program 4 (id=812): io_uring_setup(0x2720, &(0x7f0000000340)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005400)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/142, 0x8e}, {0x0}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000005500)=""/257, 0x101}, {&(0x7f0000000700)=""/252, 0xfc}], 0x6, &(0x7f00000008c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/190, 0xbe}], 0x2}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003dc0)=""/37, 0x25}], 0x1}}], 0x3, 0x1, 0x0) sendfile(r8, r6, 0x0, 0x10000a006) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000017000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 14.59013532s ago: executing program 3 (id=814): io_uring_setup(0x2720, &(0x7f0000000340)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005400)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000005500)=""/257, 0x101}, {&(0x7f0000000700)=""/252, 0xfc}], 0x5, &(0x7f00000008c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/190, 0xbe}], 0x2}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003dc0)=""/37, 0x25}], 0x1}}], 0x3, 0x1, 0x0) sendfile(r8, r6, 0x0, 0x10000a006) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000017000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 14.247051571s ago: executing program 4 (id=815): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000180)=@ethtool_sset_info={0xa}}) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x16, 0x1, 0x0, 0x0, {[@generic={0x8, 0x2}, @mptcp=@remove_addr={0x1e, 0x11, 0x9, 0x0, "1ad97d5086ff932c1b088bf9f650"}, @exp_fastopen={0xfe, 0x9, 0xf989, "a2f19f22f5"}]}}}}}}}, 0x0) 14.198831891s ago: executing program 1 (id=816): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0xa1, 0x0}) 13.856160988s ago: executing program 1 (id=817): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) 13.13355529s ago: executing program 2 (id=818): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x107, 0x17, 0x0, 0x20000000) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000005580)=""/4072, 0xfe8}, {&(0x7f00000035c0)=""/4103, 0x1007}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f0000000200)=""/157, 0x9d}], 0x5}, 0x40000000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) read(r0, &(0x7f0000001e80)=""/96, 0x60) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000070000", @ANYBLOB='\x00\t\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2040400) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) fremovexattr(r5, &(0x7f0000002340)=@known='system.posix_acl_access\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0xffffffffffffffff) 11.657174242s ago: executing program 3 (id=819): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.289881069s ago: executing program 3 (id=820): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchown(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x15}, 0x1c) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x40007) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) pread64(r3, &(0x7f0000000300)=""/13, 0xd, 0xb4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) write$dsp(r9, &(0x7f0000000280)="3f3ebf9649", 0x5) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) preadv(r10, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/168, 0xa8}], 0x2, 0xc69, 0x6) syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x1b, 0x76, 0x7f, 0x20, 0x451, 0x5152, 0xc0b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x52, 0x6f, 0x59, 0x0, [], [{{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) 10.288971971s ago: executing program 1 (id=821): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x300, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 9.968004525s ago: executing program 1 (id=822): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0x5c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {}, {}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x81}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x54) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) 6.678551992s ago: executing program 4 (id=823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setreuid(0xee01, 0xffffffffffffffff) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000000), &(0x7f0000000080)) setreuid(0xee00, r3) r4 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_elf32(r5, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x3d, 0x8, 0x2, 0x2, 0x8, 0x2, 0x3, 0x0, 0x26f, 0x38, 0xe0, 0x100, 0x2, 0x20, 0x1, 0x94, 0x6, 0x4009}}, 0x38) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = msgget$private(0x0, 0x3c2) r7 = msgget(0x2, 0x550) msgrcv(r7, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000100)={{0x3}, 0x0, 0x0, 0xe235, 0x0, 0x0, 0x0, 0x10000}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r10, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000004, "0020070000000000201b14700c1e0ac74f000000201240000100"}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xaec7, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) 6.300800239s ago: executing program 2 (id=824): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481000001f5e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.175946523s ago: executing program 1 (id=825): io_uring_setup(0x2720, &(0x7f0000000340)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005400)=[{{&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)=""/228, 0xe4}, {&(0x7f0000000500)=""/142, 0x8e}, {0x0}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000005500)=""/257, 0x101}, {&(0x7f0000000700)=""/252, 0xfc}], 0x6, &(0x7f00000008c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000003c00)=[{&(0x7f0000001940)=""/9, 0x9}, {&(0x7f0000001980)=""/190, 0xbe}], 0x2}}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003dc0)=""/37, 0x25}], 0x1}}], 0x3, 0x1, 0x0) sendfile(r8, r6, 0x0, 0x10000a006) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000017000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 5.530027655s ago: executing program 4 (id=826): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.48442501s ago: executing program 3 (id=827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x5}, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000288563"], 0xffdd) write$cgroup_devices(r3, &(0x7f0000000640)=ANY=[], 0xffdd) 5.39201164s ago: executing program 2 (id=828): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) iopl(0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000200801030000000000000020e8f673414e83e5de7939437be0136f26a7650654c8e4e26ad7177cf561a70b6082178798417855352c1a87bb26260e0070097725bdd171ffbe2c35de8e89f2ac4dbb2bced2fbefe6a7b17347ba4bbd534a773e178e1cb24de8cb1aa3598f73a0d9c602db"], 0x14}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0xfe64) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x40000) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000500053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendto$inet6(r4, &(0x7f0000000540)="e95dbf35abbc84555ebcbdde39812e17fd44e5417d1b6bd8a2199905a99602cbae6e36000079257f58aeeb881c0cce900412f30100fb43c10bbb30662f33f35ff627", 0x42, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) write$binfmt_script(r4, &(0x7f0000000300), 0x19ffe) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) flistxattr(r0, &(0x7f00000001c0)=""/19, 0x13) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs2/custom1\x00', 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) iopl(0x5) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) r9 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0xffffffffffffff82, 0x0, 0x0}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x4, 0x4, &(0x7f0000000200)=0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x10, 0x0, &(0x7f0000000680)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="538a8382f950965db68126c342fce8b99f1366e559113b48117656c5a452f7bc312c0cf9b87d2dabab60f70965f77b4e08451edfa2790ca4ebff24fe6177bac29dac0820d08c047fd8ab80aa22a9ee248eb4847c7153f47378bea54c1941ec18e0235e63ce54ef0e0488696f412d8a4cd5b233c1dd5e13b48d94666cb9c461c93f2001b555395d2f942f889ef0c60672e0cd93641997489b2577a5e08a10c4842a79edd50e9a6fe0333bea31f2d65f", 0xaf}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x178}, 0x40000) 5.166781114s ago: executing program 4 (id=829): r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044011}, 0x4000000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40383d0c, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) r7 = openat$vicodec1(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) splice(r7, 0x0, r8, 0x0, 0x100000001, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000d40)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x29, 0x36, 0xfffffffc}], 0x18, 0x20006000}], 0x1, 0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0x3f9, 0x141842) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$TCSETA(r10, 0x802c542a, 0xffffffffffffffff) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, 0x0) 4.818928732s ago: executing program 1 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x117d, &(0x7f0000000280)={0x0, 0x0, 0x542, 0x2, 0xfffffffe}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x29) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$isdn(0x22, 0x2, 0x26) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000000) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x20000002}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0x3) sendto$inet6(r3, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000200), 0xffdc) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)=0x7fffffff) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r7) 4.420046246s ago: executing program 2 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xd9f}}}]}}]}, 0x45c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) 4.249478853s ago: executing program 4 (id=832): ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendfile(r2, r1, 0x0, 0x5) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x21, @broadcast, 'vlan1\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@delchain={0xa90, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0x7}, {0xf, 0xf}, {0x0, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xa48, 0x2, [@TCA_BASIC_EMATCHES={0x2b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x3, 0x6}, {0x5, 0x1, 0xfff, 0x3}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x383c}, {0x9, 0x4, 0x2, "b3b552a0"}}}, @TCF_EM_META={0x5c, 0x3, 0x0, 0x0, {{0x9dc, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x7, 0x2}, {0x7fff, 0xfa}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="1bb433fb665edb6c78a5"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f6a9", @TCF_META_TYPE_VAR="8ea98d", @TCF_META_TYPE_VAR="d427808a", @TCF_META_TYPE_VAR="864b", @TCF_META_TYPE_VAR="55e472464d51e789", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x2}, {0xaac, 0x6, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3800}, {0x2, 0xf9, 0x1, 0x7, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0xffff}, {0xffffffff, 0x9, 0x1108, 0xb6}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x3477}, {{0x3, 0x0, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x3, 0x2, 0x1}, {0xf82, 0x8, 0x2, "8647ae8b3822298c"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x4}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x7fff}, {0x80, 0x0, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x6c1, 0x2, 0x6}, {0x42, 0x9, 0x0, "a2e7518fa3b16c1bc9"}}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x118, 0x2, 0x0, 0x0, {{0xf, 0x9, 0x22ca}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xf3, 0x5, "7cc8e87e40f6b4c5be7bea0be7010fab98aa67a860aad35b20e0e7db352c59ff4ee54f956a7b4cdec3a5d6e560672b99d6549367023674a838daf904951d5c182a7a4cd863d2fe8355d993995e62780dc81332f84b3761d6c6a01231d91b3eed1ed4cead35c62cf853fce32bcd5c4379f223b4003cdf164a86e85736aa2cb60d982865b48ed276490c6e5bbf0782ecb47c57a1afeae11d7a7e67574328df44223c0a8385cbfe8ab975fd535c9daf3387102dfe6b767251d8649447374888216bc56833438b5a1ba404fe539ef8df59a47097e188520406efa16626d41e54581063ffde91590c1379d44de7615f3da9"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0xfff}, {0xdf89, 0x8, 0x1, "2b054d1fd18922ba"}}}]}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x449fca5f}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_BASIC_POLICE={0x428, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x7ff, 0xb, 0xfffffff8, 0xd818c80, 0x79, 0x101, 0x87c, 0x8, 0x0, 0x9d6, 0x9, 0x0, 0xffffffff, 0x4fc8, 0x81, 0x6, 0x4, 0x3, 0xfff, 0x400, 0x101, 0x2, 0x3, 0x21, 0x7, 0x6, 0xcd, 0xff, 0x3, 0x3, 0x6, 0x7, 0x22d8319f, 0xc450, 0x8, 0x6, 0x6, 0x8, 0x3, 0x360, 0x6, 0x40, 0xaf, 0x200, 0x3, 0xffffd1f8, 0x5, 0x101, 0xa380, 0x7, 0x8, 0xd3, 0xb, 0x401, 0x1, 0x8, 0x2, 0x8, 0x4, 0x5, 0x5, 0x4, 0x7, 0x6, 0x47, 0x3, 0x4, 0x0, 0xbbe, 0x5, 0x3, 0x100, 0x1, 0xfffffffe, 0x6, 0x6, 0xffffffff, 0x6, 0x7, 0x80000001, 0x10000, 0xfffffff9, 0x6, 0x1, 0xf902, 0x6, 0x9, 0x3, 0x1000, 0x5, 0x3, 0x2, 0x7fffffff, 0x9, 0x5, 0x3, 0x8000, 0xfff, 0x4, 0x14e, 0x9, 0x5, 0x2, 0x6, 0xa21, 0x70ea, 0x6, 0xe, 0x7, 0x3, 0x1, 0x2, 0x0, 0x9, 0x5, 0x10001, 0x9e, 0x3, 0x9, 0xeb, 0x3, 0x3, 0xffffffff, 0x5, 0x8, 0x0, 0x3, 0x7, 0x30, 0x6, 0x200, 0x107c, 0x3, 0x2, 0x2, 0x5, 0x7, 0x0, 0xfffffff8, 0xfffffffe, 0x7ff, 0x8, 0x2, 0x7, 0x98, 0x7, 0x7cd50d4e, 0xff, 0x10, 0x40, 0x1cbb2c4e, 0x7fffffff, 0x5, 0x0, 0xc46b, 0x10001, 0x81, 0x81, 0x8, 0x3, 0x8, 0x8, 0x12, 0x2, 0xfffffffe, 0xffffffff, 0x3ff, 0x2, 0x5, 0x419, 0x1ff, 0xd, 0x8, 0x80000000, 0xb5, 0x6, 0x1, 0x6, 0x1, 0x7, 0xff, 0x40, 0x7, 0x5, 0x2, 0x1, 0x7424, 0x5, 0x1, 0x2a20, 0xb4, 0x1893, 0x1000, 0x7, 0x223c, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x1, 0x7ff, 0x0, 0x85b, 0x4bf, 0x6, 0x1, 0x9, 0xffffff01, 0x721, 0x5, 0x5960, 0xff, 0x1, 0x81, 0x1, 0x5900, 0x9, 0x1000, 0x1000, 0x96, 0x8, 0x7, 0x200, 0x1, 0x3, 0x3, 0xfffffc00, 0x100, 0x2, 0x7, 0x5, 0x10001, 0x400, 0x2, 0x0, 0x5, 0x7fff, 0x10000, 0x2, 0x400, 0x1800000, 0xfffffff1, 0x1, 0x4, 0x2bf, 0x1, 0x1000, 0x800, 0x1, 0x101, 0x7, 0x10000]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x232}]}, @TCA_BASIC_EMATCHES={0x34c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x338, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x4}, "d336254a245f9e77027c69dd28c24eceec7403f24268aef795c59a89531f6b827f8008161f5c741850c33c7a41a325faf84465e83419ecf6cc11bd3fef189c4bd52567e330aa8147a2154cf869c291f0e2d18b3292e520930dca891de268918d1d912a9baf8c52978c7594d32915bd436bae9c5ddf8577da3dadd156b41807cb653a6dd76cc9a28ce701ffafb87e6d"}}, @TCF_EM_CONTAINER={0x10c, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x1c}, "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"}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x800, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0xb, 0x2}, {0x7, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3}, {0x6c, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="37da266cb70ae2a0", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8, 0x2}, {0x0, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="ed9707", @TCF_META_TYPE_INT]}]}}, @TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="4bfd989c49", @TCF_META_TYPE_VAR="504bb8b50fd4926e0c27"]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="98", @TCF_META_TYPE_VAR="7e587381be5550db", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="0a4412", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc3, 0x3, 0xf86b}, {0x0, 0x4, 0x60000, 0x80000001}}}, @TCF_EM_META={0x98, 0x1, 0x0, 0x0, {{0x412, 0x4, 0x401}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4cd9, 0x3}, {0xf3f3, 0x9}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="09becb", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_VAR='0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 0s ago: executing program 2 (id=833): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2286, 0x1000000000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x0, {{0x0, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) fcntl$lock(r5, 0x5, &(0x7f0000000200)) r8 = socket$inet6(0xa, 0x3, 0x7) r9 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x84) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) kernel console output (not intermixed with test programs): .316068][ T937] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 186.336125][ T937] usb 5-1: USB disconnect, device number 25 [ 186.399911][ T7505] chnl_net:caif_netlink_parms(): no params data found [ 186.411557][ T5231] Bluetooth: hci5: command tx timeout [ 186.560428][ T5231] Bluetooth: hci3: command tx timeout [ 186.597239][ T7556] chnl_net:caif_netlink_parms(): no params data found [ 186.642452][ T7581] netlink: 104 bytes leftover after parsing attributes in process `syz.1.560'. [ 186.672181][ T7581] FAULT_INJECTION: forcing a failure. [ 186.672181][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 186.690305][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.1.560 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 186.700970][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.711080][ T7581] Call Trace: [ 186.714401][ T7581] [ 186.717383][ T7581] dump_stack_lvl+0x241/0x360 [ 186.722114][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.727361][ T7581] ? __pfx__printk+0x10/0x10 [ 186.732017][ T7581] ? ref_tracker_alloc+0x332/0x490 [ 186.737201][ T7581] should_fail_ex+0x3b0/0x4e0 [ 186.741945][ T7581] ? skb_clone+0x20c/0x390 [ 186.746425][ T7581] should_failslab+0xac/0x100 [ 186.751154][ T7581] ? skb_clone+0x20c/0x390 [ 186.755616][ T7581] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 186.761017][ T7581] skb_clone+0x20c/0x390 [ 186.765278][ T7581] __netlink_deliver_tap+0x3cc/0x7c0 [ 186.770584][ T7581] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.775793][ T7581] netlink_deliver_tap+0x19d/0x1b0 [ 186.780926][ T7581] netlink_sendskb+0x68/0x140 [ 186.785706][ T7581] netlink_unicast+0x39d/0x990 [ 186.790489][ T7581] ? __asan_memcpy+0x40/0x70 [ 186.795092][ T7581] ? __pfx_netlink_unicast+0x10/0x10 [ 186.800405][ T7581] netlink_rcv_skb+0x262/0x430 [ 186.805196][ T7581] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.810672][ T7581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.816005][ T7581] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.821215][ T7581] netlink_unicast+0x7f6/0x990 [ 186.826001][ T7581] ? __pfx_netlink_unicast+0x10/0x10 [ 186.831315][ T7581] ? __virt_addr_valid+0x183/0x530 [ 186.836440][ T7581] ? __check_object_size+0x48e/0x900 [ 186.841742][ T7581] netlink_sendmsg+0x8e4/0xcb0 [ 186.846525][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.851829][ T7581] ? aa_sock_msg_perm+0x91/0x160 [ 186.856786][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.862079][ T7581] __sock_sendmsg+0x221/0x270 [ 186.866777][ T7581] ____sys_sendmsg+0x52a/0x7e0 [ 186.871565][ T7581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.876880][ T7581] __sys_sendmsg+0x292/0x380 [ 186.881483][ T7581] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.886614][ T7581] ? __pfx_vfs_write+0x10/0x10 [ 186.891508][ T7581] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.897861][ T7581] ? do_syscall_64+0x100/0x230 [ 186.902653][ T7581] ? do_syscall_64+0xb6/0x230 [ 186.907370][ T7581] do_syscall_64+0xf3/0x230 [ 186.911975][ T7581] ? clear_bhb_loop+0x35/0x90 [ 186.916838][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.922751][ T7581] RIP: 0033:0x7f2fc9f7dff9 [ 186.927177][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.946817][ T7581] RSP: 002b:00007f2fcad58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.955681][ T7581] RAX: ffffffffffffffda RBX: 00007f2fca135f80 RCX: 00007f2fc9f7dff9 [ 186.963663][ T7581] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 186.971729][ T7581] RBP: 00007f2fcad58090 R08: 0000000000000000 R09: 0000000000000000 [ 186.979707][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.987686][ T7581] R13: 0000000000000000 R14: 00007f2fca135f80 R15: 00007f2fca25fa28 [ 186.995698][ T7581] [ 187.375555][ T51] IPVS: stop unused estimator thread 0... [ 187.403682][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.418397][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.418601][ T7505] bridge_slave_0: entered allmulticast mode [ 187.423237][ T7505] bridge_slave_0: entered promiscuous mode [ 187.606516][ T7505] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.613993][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.623035][ T7505] bridge_slave_1: entered allmulticast mode [ 187.630404][ T5238] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 187.630497][ T7505] bridge_slave_1: entered promiscuous mode [ 187.745607][ T7607] vivid-001: ================= START STATUS ================= [ 187.745887][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.753635][ T7607] vivid-001: Radio HW Seek Mode: Bounded [ 187.766399][ T7607] vivid-001: Radio Programmable HW Seek: false [ 187.772809][ T7607] vivid-001: RDS Rx I/O Mode: Block I/O [ 187.778586][ T7607] vivid-001: Generate RBDS Instead of RDS: false [ 187.785411][ T7607] vivid-001: RDS Reception: true [ 187.791716][ T7607] vivid-001: RDS Program Type: 0 inactive [ 187.795193][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.801834][ T7607] vivid-001: RDS PS Name: [ 187.808002][ T5238] usb 2-1: Using ep0 maxpacket: 16 [ 187.811152][ T7607] inactive [ 187.820037][ T7556] bridge_slave_0: entered allmulticast mode [ 187.827873][ T7607] vivid-001: RDS Radio Text: inactive [ 187.831054][ T5238] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 187.838025][ T7607] vivid-001: RDS Traffic Announcement: [ 187.843410][ T5238] usb 2-1: config 3 has an invalid interface number: 198 but max is 1 [ 187.848906][ T7607] false [ 187.849000][ T5238] usb 2-1: config 3 has an invalid interface number: 2 but max is 1 [ 187.869831][ T7556] bridge_slave_0: entered promiscuous mode [ 187.875829][ T5238] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 187.878511][ T7607] inactive [ 187.893700][ T7505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.905705][ T7607] [ 187.910357][ T5238] usb 2-1: config 3 has an invalid descriptor of length 209, skipping remainder of the config [ 187.917745][ T7607] vivid-001: RDS Traffic Program: false inactive [ 187.925098][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.936578][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.944534][ T5238] usb 2-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 187.948831][ T7607] vivid-001: RDS Music: [ 187.954321][ T7556] bridge_slave_1: entered allmulticast mode [ 187.965052][ T5238] usb 2-1: config 3 has no interface number 0 [ 187.972863][ T7556] bridge_slave_1: entered promiscuous mode [ 187.976360][ T7607] false inactive [ 187.978919][ T5238] usb 2-1: config 3 interface 1 altsetting 40 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 187.997453][ T7607] vivid-001: ================== END STATUS ================== [ 188.003375][ T5238] usb 2-1: config 3 interface 1 altsetting 40 bulk endpoint 0x7 has invalid maxpacket 8 [ 188.016619][ T5238] usb 2-1: config 3 interface 1 altsetting 40 has a duplicate endpoint with address 0x7, skipping [ 188.029068][ T5238] usb 2-1: config 3 interface 1 altsetting 40 has a duplicate endpoint with address 0xB, skipping [ 188.045602][ T5238] usb 2-1: config 3 interface 1 altsetting 40 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 188.057368][ T5238] usb 2-1: config 3 interface 1 altsetting 40 bulk endpoint 0x8 has invalid maxpacket 16 [ 188.067729][ T5238] usb 2-1: config 3 interface 1 altsetting 40 has a duplicate endpoint with address 0x7, skipping [ 188.078904][ T5238] usb 2-1: config 3 interface 1 altsetting 40 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 188.093795][ T5238] usb 2-1: too many endpoints for config 3 interface 198 altsetting 165: 218, using maximum allowed: 30 [ 188.121068][ T5238] usb 2-1: config 3 interface 198 altsetting 165 has a duplicate endpoint with address 0x7, skipping [ 188.133055][ T5238] usb 2-1: config 3 interface 198 altsetting 165 has a duplicate endpoint with address 0x1, skipping [ 188.144700][ T5238] usb 2-1: config 3 interface 198 altsetting 165 has 2 endpoint descriptors, different from the interface descriptor's value: 218 [ 188.201230][ T5238] usb 2-1: config 3 interface 2 altsetting 110 endpoint 0x2 has invalid maxpacket 9227, setting to 64 [ 188.235255][ T7505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.264508][ T5238] usb 2-1: config 3 interface 2 altsetting 110 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 188.310830][ T5238] usb 2-1: config 3 interface 1 has no altsetting 0 [ 188.317519][ T5238] usb 2-1: config 3 interface 198 has no altsetting 0 [ 188.351503][ T5238] usb 2-1: config 3 interface 2 has no altsetting 0 [ 188.362147][ T5238] usb 2-1: New USB device found, idVendor=16d8, idProduct=7253, bcdDevice= b.78 [ 188.382205][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.394742][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.410339][ T5238] usb 2-1: Product: ф [ 188.414603][ T5238] usb 2-1: Manufacturer: 극ꃤ㬐멡릎斈긑럘ꂄ晫膦ᖶ駡伶ꍖ渀අ貗슉ጿ쇟℞庂ᘸ㾩ᖡ녖쥺ڥ쎰䱝륈ተ⩛㇖杖⦖桪䉇塴ݏ晝쀡鿩䦁反뱗ꦂ酧﻽烕께탤丞כֿꠓ侳Ḉ遲⹷枍ﺾ왋㎜샤礘偹閬굼䨫⃪ᢄ墼밁︧ﶴ칳ᴘⅳ [ 188.488352][ T5231] Bluetooth: hci5: command tx timeout [ 188.523166][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.534092][ T5238] usb 2-1: SerialNumber: Ъ [ 188.542905][ T7598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.556618][ T7598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 188.578633][ T7505] team0: Port device team_slave_0 added [ 188.640400][ T5231] Bluetooth: hci3: command tx timeout [ 188.675615][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.703812][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.754454][ T7505] team0: Port device team_slave_1 added [ 188.788105][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.798707][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.807595][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.818368][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.826170][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.841478][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.954757][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.114031][ T7556] team0: Port device team_slave_0 added [ 189.132095][ T5238] option 2-1:3.198: GSM modem (1-port) converter detected [ 189.165390][ T5238] option 2-1:3.2: GSM modem (1-port) converter detected [ 189.218462][ T5238] usb 2-1: USB disconnect, device number 15 [ 189.225522][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.262105][ T5238] option 2-1:3.198: device disconnected [ 189.277363][ T5238] option 2-1:3.2: device disconnected [ 189.295004][ T7505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.317226][ T7505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.344633][ T7505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.365126][ T7556] team0: Port device team_slave_1 added [ 189.407180][ T7505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.421457][ T7505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.447404][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.455478][ T7505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.528516][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.543050][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.569073][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.577735][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.710133][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.776573][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.783811][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.819332][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.876886][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.980647][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.031047][ T7505] hsr_slave_0: entered promiscuous mode [ 190.045287][ T7505] hsr_slave_1: entered promiscuous mode [ 190.192034][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.391232][ T7556] hsr_slave_0: entered promiscuous mode [ 190.414821][ T7556] hsr_slave_1: entered promiscuous mode [ 190.475945][ T7556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.524876][ T7556] Cannot create hsr debugfs directory [ 190.569098][ T5231] Bluetooth: hci5: command tx timeout [ 190.720452][ T5231] Bluetooth: hci3: command tx timeout [ 190.967838][ T5231] Bluetooth: hci2: command tx timeout [ 191.106332][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 191.183114][ T7661] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 191.189955][ T7661] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.209815][ T7661] vhci_hcd vhci_hcd.0: Device attached [ 191.303256][ T51] bridge_slave_1: left allmulticast mode [ 191.308947][ T51] bridge_slave_1: left promiscuous mode [ 191.314818][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.347623][ T51] bridge_slave_0: left allmulticast mode [ 191.353808][ T51] bridge_slave_0: left promiscuous mode [ 191.360486][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.412130][ T51] bridge_slave_1: left allmulticast mode [ 191.417866][ T51] bridge_slave_1: left promiscuous mode [ 191.431078][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.451901][ T51] bridge_slave_0: left allmulticast mode [ 191.457590][ T51] bridge_slave_0: left promiscuous mode [ 191.478995][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.540304][ T5278] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 192.263122][ T7662] vhci_hcd: connection reset by peer [ 192.275270][ T12] vhci_hcd: stop threads [ 192.281047][ T12] vhci_hcd: release socket [ 192.296954][ T12] vhci_hcd: disconnect device [ 192.446076][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.457689][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.469461][ T51] bond0 (unregistering): Released all slaves [ 192.597570][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.609107][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.620995][ T51] bond0 (unregistering): Released all slaves [ 192.804301][ T5231] Bluetooth: hci3: command tx timeout [ 192.895059][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.902637][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.911594][ T7632] bridge_slave_0: entered allmulticast mode [ 192.921714][ T7632] bridge_slave_0: entered promiscuous mode [ 193.047817][ T5231] Bluetooth: hci2: command tx timeout [ 193.086115][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.105963][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.124982][ T7632] bridge_slave_1: entered allmulticast mode [ 193.133669][ T7632] bridge_slave_1: entered promiscuous mode [ 193.188586][ T7699] FAULT_INJECTION: forcing a failure. [ 193.188586][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 193.202933][ T7699] CPU: 1 UID: 0 PID: 7699 Comm: syz.1.581 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 193.213597][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.223700][ T7699] Call Trace: [ 193.227125][ T7699] [ 193.230085][ T7699] dump_stack_lvl+0x241/0x360 [ 193.234792][ T7699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.240014][ T7699] ? __pfx__printk+0x10/0x10 [ 193.244686][ T7699] should_fail_ex+0x3b0/0x4e0 [ 193.249436][ T7699] should_failslab+0xac/0x100 [ 193.254163][ T7699] ? sctp_add_bind_addr+0x89/0x3a0 [ 193.259301][ T7699] __kmalloc_cache_noprof+0x6c/0x2c0 [ 193.264628][ T7699] sctp_add_bind_addr+0x89/0x3a0 [ 193.269598][ T7699] sctp_copy_local_addr_list+0x311/0x500 [ 193.275253][ T7699] ? sctp_copy_local_addr_list+0xab/0x500 [ 193.280996][ T7699] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 193.287174][ T7699] ? sctp_v4_is_any+0x35/0x60 [ 193.291874][ T7699] sctp_bind_addr_copy+0xad/0x3b0 [ 193.296958][ T7699] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 193.303313][ T7699] sctp_connect_new_asoc+0x2f3/0x6c0 [ 193.308639][ T7699] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 193.314485][ T7699] ? sctp_sendmsg+0xbb9/0x3520 [ 193.319294][ T7699] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 193.325177][ T7699] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 193.330784][ T7699] sctp_sendmsg+0x219a/0x3520 [ 193.335510][ T7699] ? aa_sk_perm+0x96d/0xab0 [ 193.340059][ T7699] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.345204][ T7699] ? __pfx_aa_sk_perm+0x10/0x10 [ 193.350085][ T7699] ? inet_sendmsg+0x330/0x390 [ 193.354806][ T7699] __sock_sendmsg+0x1a6/0x270 [ 193.359506][ T7699] __sys_sendto+0x39b/0x4f0 [ 193.364042][ T7699] ? __pfx___sys_sendto+0x10/0x10 [ 193.369101][ T7699] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 193.375113][ T7699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.381481][ T7699] __x64_sys_sendto+0xde/0x100 [ 193.386294][ T7699] do_syscall_64+0xf3/0x230 [ 193.390922][ T7699] ? clear_bhb_loop+0x35/0x90 [ 193.395651][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.401582][ T7699] RIP: 0033:0x7f2fc9f7dff9 [ 193.406017][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.425662][ T7699] RSP: 002b:00007f2fcad58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.434103][ T7699] RAX: ffffffffffffffda RBX: 00007f2fca135f80 RCX: 00007f2fc9f7dff9 [ 193.442112][ T7699] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 193.450118][ T7699] RBP: 00007f2fcad58090 R08: 00000000200001c0 R09: 0000000000000010 [ 193.458129][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.466129][ T7699] R13: 0000000000000000 R14: 00007f2fca135f80 R15: 00007f2fca25fa28 [ 193.474153][ T7699] [ 193.477293][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.545060][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.788288][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.066150][ T7632] team0: Port device team_slave_0 added [ 194.136749][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.585'. [ 194.318204][ T7632] team0: Port device team_slave_1 added [ 194.602234][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.617104][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.645327][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654595][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.683943][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.742853][ T51] hsr_slave_0: left promiscuous mode [ 194.759619][ T51] hsr_slave_1: left promiscuous mode [ 194.789575][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.822899][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.836158][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.858268][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.877835][ T51] hsr_slave_0: left promiscuous mode [ 194.970321][ T51] hsr_slave_1: left promiscuous mode [ 194.983598][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.004874][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.030913][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.050198][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.100558][ T51] veth1_macvtap: left promiscuous mode [ 195.106165][ T51] veth0_macvtap: left promiscuous mode [ 195.112080][ T51] veth1_vlan: left promiscuous mode [ 195.117436][ T51] veth0_vlan: left promiscuous mode [ 195.123193][ T5231] Bluetooth: hci2: command tx timeout [ 195.153062][ T51] veth1_macvtap: left promiscuous mode [ 195.166386][ T51] veth0_macvtap: left promiscuous mode [ 195.172249][ T51] veth1_vlan: left promiscuous mode [ 195.177567][ T51] veth0_vlan: left promiscuous mode [ 195.832820][ T51] team0 (unregistering): Port device team_slave_1 removed [ 195.877856][ T51] team0 (unregistering): Port device team_slave_0 removed [ 196.642188][ T5278] vhci_hcd: vhci_device speed not set [ 196.704947][ T51] team0 (unregistering): Port device team_slave_1 removed [ 196.753348][ T51] team0 (unregistering): Port device team_slave_0 removed [ 197.202134][ T5231] Bluetooth: hci2: command tx timeout [ 197.271274][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.278281][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.305956][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.504210][ T7632] hsr_slave_0: entered promiscuous mode [ 197.554822][ T7632] hsr_slave_1: entered promiscuous mode [ 197.575719][ T7632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.584911][ T7632] Cannot create hsr debugfs directory [ 197.969706][ T7556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 197.982351][ T7556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.006056][ T7556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.027321][ T7556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.034378][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 198.138230][ T51] IPVS: stop unused estimator thread 0... [ 198.190620][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 198.205287][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 198.213829][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.239387][ T7505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.243603][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.274897][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.295935][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.316433][ T7505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.333407][ T25] usb 1-1: config 0 descriptor?? [ 198.389136][ T7505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.419494][ T7505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.764764][ T57] usb 1-1: USB disconnect, device number 20 [ 198.773333][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.828877][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.864803][ T7505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.908760][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.916014][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.976491][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.983764][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.093251][ T7505] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.121187][ T7772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.139018][ T7556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.150803][ T7556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.172061][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.179261][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.217761][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.224932][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.263285][ T7632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.277333][ T7632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.287764][ T7632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.305344][ T7632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.334476][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.493865][ T7505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.501315][ T7556] veth0_vlan: entered promiscuous mode [ 199.536502][ T7556] veth1_vlan: entered promiscuous mode [ 199.616135][ T7556] veth0_macvtap: entered promiscuous mode [ 199.628549][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.689984][ T7556] veth1_macvtap: entered promiscuous mode [ 199.796039][ T7505] veth0_vlan: entered promiscuous mode [ 199.857034][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.882632][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.932817][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.943407][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.954150][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.968723][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.009541][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.029440][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.043235][ T7556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.061950][ T7556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.084557][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.103332][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.110624][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.141431][ T7556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.156904][ T7556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.173161][ T7556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.182572][ T7556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.201498][ T7505] veth1_vlan: entered promiscuous mode [ 200.216522][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.223674][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.451629][ T7505] veth0_macvtap: entered promiscuous mode [ 200.482479][ T7789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.567627][ T7505] veth1_macvtap: entered promiscuous mode [ 200.640732][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.649714][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.680970][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.696201][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.715562][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.750440][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.769514][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.809710][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.844241][ T7505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.901146][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.945280][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.973462][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.986935][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.010507][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.027459][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.052065][ T7505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.078572][ T7505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.104126][ T7505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.118241][ T7505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.139763][ T7505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.223035][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.245837][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.262414][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.455224][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.467968][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.548686][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.570319][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.759500][ T7632] veth0_vlan: entered promiscuous mode [ 201.873983][ T7632] veth1_vlan: entered promiscuous mode [ 201.947197][ T7835] netlink: 'syz.1.606': attribute type 7 has an invalid length. [ 201.970422][ T7835] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.606'. [ 202.016417][ T7835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.070781][ T7632] veth0_macvtap: entered promiscuous mode [ 202.131640][ T5231] Bluetooth: Unexpected continuation frame (len 18) [ 202.151684][ T7632] veth1_macvtap: entered promiscuous mode [ 202.290868][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.311320][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.330086][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.358500][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.385444][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.425495][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.453814][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.485409][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.510503][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 202.548196][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.601869][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.645634][ T7865] binder: 7862:7865 ioctl 80106720 20000400 returned -22 [ 202.652249][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.670851][ T7865] binder: 7862:7865 ioctl c0306201 20000200 returned -22 [ 202.680382][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.694880][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.715301][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.717083][ T7863] netlink: 104 bytes leftover after parsing attributes in process `syz.3.611'. [ 202.726224][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.745541][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.756193][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.767569][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.819659][ T7632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.828512][ T7632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.837390][ T7632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.846187][ T7632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.864991][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 202.952378][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.977915][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 202.978682][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.987771][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.987803][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 203.097960][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.114951][ T9] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 203.124752][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.143852][ T9] usb 3-1: Product: syz [ 203.155241][ T9] usb 3-1: Manufacturer: syz [ 203.157355][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.183538][ T9] usb 3-1: SerialNumber: syz [ 203.222884][ T9] usb 3-1: config 0 descriptor?? [ 203.353299][ T9] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 203.676581][ T5278] usb 3-1: USB disconnect, device number 27 [ 203.970227][ T939] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 203.997215][ T7895] ebtables: ebtables: counters copy to user failed while replacing table [ 204.132705][ T939] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 204.141231][ T939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.188278][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 204.238063][ T939] usb 5-1: config 0 has no interface number 0 [ 204.256182][ T939] usb 5-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.274825][ T939] usb 5-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 204.291281][ T939] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 204.369302][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 204.398712][ T939] usb 5-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 204.522144][ T939] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66 [ 204.536195][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.547543][ T939] usb 5-1: Product: syz [ 204.613743][ T939] usb 5-1: Manufacturer: syz [ 204.618476][ T939] usb 5-1: SerialNumber: syz [ 204.626509][ T939] usb 5-1: config 0 descriptor?? [ 204.679560][ T5291] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 204.868302][ T939] cypress_m8 5-1:0.74: HID->COM RS232 Adapter converter detected [ 204.908855][ T939] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 204.909358][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 204.968379][ T5291] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 204.969264][ T939] usb 5-1: USB disconnect, device number 26 [ 204.985149][ T5291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.081251][ T5291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.086109][ T939] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 205.100298][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.100332][ T5291] usb 3-1: Product: 䰸 [ 205.100351][ T5291] usb 3-1: Manufacturer: 췈኷揄塜䦵⹎꿓烔ᚓ瑚ꤴ쮯뙭ᓾ [ 205.100372][ T5291] usb 3-1: SerialNumber: Ⰺ [ 205.230817][ T939] cypress_m8 5-1:0.74: device disconnected [ 205.517730][ T5291] usb 3-1: 0:2 : does not exist [ 205.565368][ T5291] usb 3-1: USB disconnect, device number 28 [ 205.646165][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.791225][ T29] audit: type=1326 audit(1727807948.950:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 205.844046][ T29] audit: type=1326 audit(1727807948.950:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 205.964881][ T29] audit: type=1326 audit(1727807948.970:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 205.987203][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.021729][ T7955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.068719][ T29] audit: type=1326 audit(1727807948.970:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.109935][ T7960] netlink: 'syz.2.632': attribute type 8 has an invalid length. [ 206.159857][ T7960] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.632'. [ 206.213833][ T29] audit: type=1326 audit(1727807948.970:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.236221][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.311606][ T7970] IPVS: Unknown mcast interface: ip6erspan0 [ 206.339230][ T29] audit: type=1326 audit(1727807948.970:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.434590][ T29] audit: type=1326 audit(1727807948.970:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.541288][ T29] audit: type=1326 audit(1727807948.970:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.639528][ T29] audit: type=1326 audit(1727807948.980:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.721094][ T29] audit: type=1326 audit(1727807948.990:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.4.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386c17dff9 code=0x7ffc0000 [ 206.749493][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 206.970579][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 206.984123][ T9] usb 4-1: config 0 has an invalid interface number: 28 but max is 12 [ 207.035833][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 207.079034][ T9] usb 4-1: config 0 has no interface number 0 [ 207.105371][ T9] usb 4-1: too many endpoints for config 0 interface 28 altsetting 194: 120, using maximum allowed: 30 [ 207.139737][ T9] usb 4-1: config 0 interface 28 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 207.176732][ T9] usb 4-1: config 0 interface 28 has no altsetting 0 [ 207.204547][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 207.224145][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.245655][ T9] usb 4-1: Product: syz [ 207.249922][ T9] usb 4-1: Manufacturer: syz [ 207.271442][ T9] usb 4-1: SerialNumber: syz [ 207.299490][ T9] usb 4-1: config 0 descriptor?? [ 207.370679][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 207.526453][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 207.565852][ T8] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 207.608924][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.642928][ T8] usb 3-1: config 0 descriptor?? [ 207.683427][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 207.754811][ T8008] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 208.016072][ T8022] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 208.053226][ T8] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 208.288319][ T8034] vivid-004: ================= START STATUS ================= [ 208.310171][ T8034] vivid-004: Radio HW Seek Mode: Bounded [ 208.316151][ T8034] vivid-004: Radio Programmable HW Seek: false [ 208.350934][ T8034] vivid-004: RDS Rx I/O Mode: Block I/O [ 208.377947][ T8034] vivid-004: Generate RBDS Instead of RDS: false [ 208.414584][ T8034] vivid-004: RDS Reception: true [ 208.445086][ T8034] vivid-004: RDS Program Type: 0 inactive [ 208.454493][ T8034] vivid-004: RDS PS Name: inactive [ 208.471043][ T8034] vivid-004: RDS Radio Text: inactive [ 208.491125][ T8034] vivid-004: RDS Traffic Announcement: false inactive [ 208.501923][ T8034] vivid-004: RDS Traffic Program: false inactive [ 208.540275][ T8034] vivid-004: RDS Music: false inactive [ 208.547159][ T8034] vivid-004: ================== END STATUS ================== [ 208.780959][ T939] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 208.863052][ T8] gspca_cpia1: usb_control_msg 03, error -71 [ 208.869296][ T8] cpia1 3-1:0.0: unexpected systemstate: 00 [ 208.905039][ T8] usb 3-1: USB disconnect, device number 29 [ 208.961336][ T939] usb 2-1: Using ep0 maxpacket: 8 [ 208.967312][ T9] gspca_zc3xx: reg_w_i err -71 [ 208.985836][ T939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.999799][ T939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.018602][ T939] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.029031][ T939] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.050440][ T939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 209.065141][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.281303][ T939] usb 2-1: usb_control_msg returned -32 [ 209.300314][ T939] usbtmc 2-1:16.0: can't read capabilities [ 209.569295][ T8080] program syz.2.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.580370][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 209.591449][ T9] gspca_zc3xx 4-1:0.28: probe with driver gspca_zc3xx failed with error -71 [ 209.607255][ T9] usb 4-1: USB disconnect, device number 22 [ 209.620242][ T5291] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 209.780924][ T5291] usb 1-1: Using ep0 maxpacket: 16 [ 209.815728][ T5291] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.839341][ T5291] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 209.852162][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 209.866968][ T5291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 209.878798][ T5291] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.897585][ T5291] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 209.908612][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.918160][ T5291] usb 1-1: Product: syz [ 209.922716][ T5291] usb 1-1: Manufacturer: syz [ 209.927624][ T5291] usb 1-1: SerialNumber: syz [ 209.939255][ T5291] usb 1-1: config 0 descriptor?? [ 210.167454][ T5291] appledisplay 1-1:0.0: Error while getting initial brightness: -71 [ 210.189509][ T5291] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -71 [ 210.209954][ T5291] usb 1-1: USB disconnect, device number 21 [ 210.289871][ T8092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.318592][ T8092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.999361][ T8106] bridge1: entered promiscuous mode [ 211.005775][ T8106] bridge1: entered allmulticast mode [ 211.232322][ T8110] batman_adv: batadv0: Adding interface: wlan1 [ 211.245589][ T8110] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.279202][ T8110] batman_adv: batadv0: Interface activated: wlan1 [ 211.303864][ T8110] batman_adv: batadv0: Interface deactivated: wlan1 [ 211.373788][ T8110] batman_adv: batadv0: Removing interface: wlan1 [ 211.495743][ T5291] usb 2-1: USB disconnect, device number 16 [ 211.505989][ T8088] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71 [ 211.872631][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 211.892614][ T8129] vivid-001: ================= START STATUS ================= [ 211.902308][ T8129] vivid-001: Radio HW Seek Mode: Bounded [ 211.913833][ T8129] vivid-001: Radio Programmable HW Seek: false [ 211.920055][ T8129] vivid-001: RDS Rx I/O Mode: Block I/O [ 211.927615][ T8129] vivid-001: Generate RBDS Instead of RDS: false [ 211.954243][ T8129] vivid-001: RDS Reception: true [ 211.963774][ T8129] vivid-001: RDS Program Type: 0 inactive [ 212.000203][ T8129] vivid-001: RDS PS Name: inactive [ 212.090358][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 212.116883][ T8129] vivid-001: RDS Radio Text: inactive [ 212.123159][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.134009][ T8129] vivid-001: RDS Traffic Announcement: false inactive [ 212.142059][ T8129] vivid-001: RDS Traffic Program: false inactive [ 212.148855][ T8129] vivid-001: RDS Music: false inactive [ 212.155305][ T8129] vivid-001: ================== END STATUS ================== [ 212.233647][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.248559][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.290616][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.345750][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.420533][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.429767][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.533910][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.818396][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.827245][ T8] usb 3-1: usb_control_msg returned -32 [ 212.833048][ T8] usbtmc 3-1:16.0: can't read capabilities [ 212.880530][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.898913][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.907294][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.917199][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.924871][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.048823][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.289007][ T8145] program syz.1.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.313413][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.749645][ T51] bridge_slave_1: left allmulticast mode [ 213.758181][ T51] bridge_slave_1: left promiscuous mode [ 213.764187][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.792645][ T51] bridge_slave_0: left allmulticast mode [ 213.806809][ T51] bridge_slave_0: left promiscuous mode [ 213.828992][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.860776][ T8156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.920738][ T8156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.951363][ T5291] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 214.147090][ T5291] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 214.191639][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.199722][ T5291] usb 4-1: Product: syz [ 214.219050][ T5291] usb 4-1: Manufacturer: syz [ 214.228368][ T5291] usb 4-1: SerialNumber: syz [ 214.248820][ T5291] usb 4-1: config 0 descriptor?? [ 214.274954][ T5291] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 214.294685][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 214.317408][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 214.343404][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 214.364858][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 214.387300][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 214.409542][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 214.435585][ T5291] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 214.447586][ T5291] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 214.610911][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 214.729148][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.741987][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.754796][ T51] bond0 (unregistering): Released all slaves [ 214.771934][ T8158] batman_adv: batadv0: Adding interface: wlan1 [ 214.778168][ T8158] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.780235][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 214.809145][ T8158] batman_adv: batadv0: Interface activated: wlan1 [ 214.833410][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.849210][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.876382][ T8159] batman_adv: batadv0: Interface deactivated: wlan1 [ 214.881197][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.906958][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.922480][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.931812][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.950994][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 214.960365][ T4624] Bluetooth: hci2: command tx timeout [ 214.982053][ T5291] usb 3-1: USB disconnect, device number 30 [ 214.982182][ T8148] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 215.002464][ T8160] batman_adv: batadv0: Removing interface: wlan1 [ 215.063382][ T8154] syz_tun: entered promiscuous mode [ 215.092306][ T8154] syz_tun: left promiscuous mode [ 215.134555][ T25] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 215.147861][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 215.172240][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.184200][ T9] usb 4-1: USB disconnect, device number 23 [ 215.193007][ T25] usb 2-1: Product: syz [ 215.193550][ T8] usb 1-1: usb_control_msg returned -32 [ 215.197211][ T25] usb 2-1: Manufacturer: syz [ 215.209132][ T8] usbtmc 1-1:16.0: can't read capabilities [ 215.226339][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 215.230414][ T25] usb 2-1: SerialNumber: syz [ 215.248926][ T25] usb 2-1: config 0 descriptor?? [ 215.266247][ T9] keyspan 4-1:0.0: device disconnected [ 215.270719][ T25] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 215.287781][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 215.318308][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 215.342656][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 215.351715][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 215.359362][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 215.381549][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 215.389318][ T25] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 215.405239][ T25] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 215.669946][ T8168] ip6gretap0: entered promiscuous mode [ 215.699125][ T8168] ip6gretap0: left promiscuous mode [ 215.768566][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.801826][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.809128][ T8139] bridge_slave_0: entered allmulticast mode [ 215.833557][ T8] usb 2-1: USB disconnect, device number 17 [ 215.881574][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 215.881881][ T8139] bridge_slave_0: entered promiscuous mode [ 215.922824][ T8] keyspan 2-1:0.0: device disconnected [ 215.983485][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.000977][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.008395][ T8139] bridge_slave_1: entered allmulticast mode [ 216.026731][ T8139] bridge_slave_1: entered promiscuous mode [ 216.169433][ T51] hsr_slave_0: left promiscuous mode [ 216.196413][ T51] hsr_slave_1: left promiscuous mode [ 216.207383][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.233357][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.246011][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.266141][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.294894][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.334929][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.459426][ T51] veth1_macvtap: left promiscuous mode [ 216.473749][ T51] veth0_macvtap: left promiscuous mode [ 216.502237][ T51] veth1_vlan: left promiscuous mode [ 216.515012][ T51] veth0_vlan: left promiscuous mode [ 216.697902][ T8203] program syz.2.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.041746][ T4624] Bluetooth: hci2: command tx timeout [ 217.319503][ T8160] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71 [ 217.327035][ T25] usb 1-1: USB disconnect, device number 22 [ 217.536829][ T939] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.714733][ T939] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 217.717806][ T8218] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 217.739825][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.749619][ T939] usb 2-1: Product: syz [ 217.758733][ T939] usb 2-1: Manufacturer: syz [ 217.765594][ T939] usb 2-1: SerialNumber: syz [ 217.802269][ T939] usb 2-1: config 0 descriptor?? [ 217.810001][ T939] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 217.821537][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 217.836338][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 217.846230][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 217.854199][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 217.862886][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 217.871043][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 217.879063][ T939] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 217.899729][ T939] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 217.940716][ T51] team0 (unregistering): Port device team_slave_1 removed [ 217.995033][ T51] team0 (unregistering): Port device team_slave_0 removed [ 218.513096][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.562005][ T8220] netlink: 44 bytes leftover after parsing attributes in process `syz.2.698'. [ 218.590401][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 218.623606][ T8210] ip6gretap0: entered promiscuous mode [ 218.653377][ T8210] ip6gretap0: left promiscuous mode [ 218.705680][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.729857][ T8226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.702'. [ 218.789332][ T5291] usb 2-1: USB disconnect, device number 18 [ 218.804864][ T5291] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 218.825095][ T5291] keyspan 2-1:0.0: device disconnected [ 218.854472][ T8224] team0: Port device macvlan1 added [ 218.879479][ T8227] team0: Port device macvlan1 removed [ 218.901830][ T8139] team0: Port device team_slave_0 added [ 218.922285][ T8139] team0: Port device team_slave_1 added [ 218.964751][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.972625][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.999197][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.012370][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.019358][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.020499][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 219.045415][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.107349][ T8139] hsr_slave_0: entered promiscuous mode [ 219.120824][ T4624] Bluetooth: hci2: command tx timeout [ 219.130760][ T8139] hsr_slave_1: entered promiscuous mode [ 219.138492][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.146402][ T8139] Cannot create hsr debugfs directory [ 219.232008][ T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 219.250518][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.286026][ T25] usb 3-1: config 0 descriptor?? [ 219.581782][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.739720][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 219.815813][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.855061][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.877213][ T25] hackrf 3-1:0.0: Board ID: 00 [ 219.895534][ T25] hackrf 3-1:0.0: Firmware version: [ 219.930276][ T25] hackrf 3-1:0.0: Registered as swradio16 [ 219.942493][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.954430][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.970484][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.984052][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.993819][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.002046][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.011842][ T25] hackrf 3-1:0.0: Registered as swradio17 [ 220.017647][ T25] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 220.125709][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.243818][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.289025][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.362856][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.379235][ T8264] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 220.388618][ T8264] netlink: 'syz.3.710': attribute type 2 has an invalid length. [ 220.518352][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.574517][ T8269] netlink: 280 bytes leftover after parsing attributes in process `syz.1.712'. [ 220.616286][ T8269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.624006][ T8269] IPv6: NLM_F_CREATE should be set when creating new route [ 220.783829][ T5278] usb 3-1: USB disconnect, device number 31 [ 220.987415][ T8139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.033729][ T51] bridge_slave_1: left allmulticast mode [ 221.039453][ T51] bridge_slave_1: left promiscuous mode [ 221.048387][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.065749][ T51] bridge_slave_0: left allmulticast mode [ 221.071742][ T51] bridge_slave_0: left promiscuous mode [ 221.077521][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.211251][ T5231] Bluetooth: hci2: command tx timeout [ 221.270434][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 221.434766][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.455614][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.484614][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.500309][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.516916][ T9] usb 2-1: SerialNumber: syz [ 221.737091][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.757614][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.805908][ T9] usb 2-1: 0:2 : does not exist [ 221.856616][ T9] usb 2-1: USB disconnect, device number 19 [ 221.904201][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.047369][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.066156][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.082533][ T51] bond0 (unregistering): Released all slaves [ 222.091127][ T5231] Bluetooth: hci4: command tx timeout [ 222.108252][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 222.176189][ T8139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.186725][ T8139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.277879][ T8139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.374610][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.413124][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.437939][ T8262] bridge_slave_0: entered allmulticast mode [ 222.452793][ T8262] bridge_slave_0: entered promiscuous mode [ 222.552447][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.559631][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.575609][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 222.576151][ T8262] bridge_slave_1: entered allmulticast mode [ 222.598338][ T8262] bridge_slave_1: entered promiscuous mode [ 222.621898][ T8291] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.088921][ T8291] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 223.110929][ T8291] batman_adv: batadv0: Adding interface: ip6gretap1 [ 223.150429][ T8291] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.165413][ T8276] syz.2.715: vmalloc error: size 3919872, failed to allocated page array size 7656, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.210509][ T8291] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 223.235386][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.2.715 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 223.246060][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.256155][ T8276] Call Trace: [ 223.259461][ T8276] [ 223.262414][ T8276] dump_stack_lvl+0x241/0x360 [ 223.267107][ T8276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.272316][ T8276] ? __pfx__printk+0x10/0x10 [ 223.276924][ T8276] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 223.283353][ T8276] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 223.290150][ T8276] warn_alloc+0x278/0x410 [ 223.294552][ T8276] ? __pfx_warn_alloc+0x10/0x10 [ 223.299459][ T8276] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 223.305696][ T8276] ? __get_vm_area_node+0x23d/0x270 [ 223.310959][ T8276] __vmalloc_node_range_noprof+0x691/0x13f0 [ 223.316960][ T8276] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 223.323060][ T8276] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.325790][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.329431][ T8276] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 223.344696][ T8276] ? __get_vm_area_node+0x23d/0x270 [ 223.349934][ T8276] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 223.355846][ T8276] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 223.362114][ T8276] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 223.367870][ T8276] ? rcu_is_watching+0x15/0xb0 [ 223.372654][ T8276] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.379080][ T8276] ? rcu_is_watching+0x15/0xb0 [ 223.383860][ T8276] ? trace_kmalloc+0x1f/0xd0 [ 223.388466][ T8276] ? __kmalloc_node_noprof+0x247/0x440 [ 223.393942][ T8276] ? __kvmalloc_node_noprof+0x72/0x190 [ 223.399504][ T8276] __kvmalloc_node_noprof+0x142/0x190 [ 223.405035][ T8276] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 223.411228][ T8276] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 223.417240][ T8276] ? tpg_update_mv_step+0x361/0x4f0 [ 223.422584][ T8276] vivid_update_format_cap+0x133c/0x2090 [ 223.428275][ T8276] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 223.434296][ T8276] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 223.440149][ T8276] __video_do_ioctl+0xc23/0xdd0 [ 223.445045][ T8276] ? __pfx___video_do_ioctl+0x10/0x10 [ 223.450459][ T8276] ? __might_fault+0xc6/0x120 [ 223.455177][ T8276] video_usercopy+0x89b/0x1180 [ 223.460059][ T8276] ? __pfx___video_do_ioctl+0x10/0x10 [ 223.465462][ T8276] ? __pfx_video_usercopy+0x10/0x10 [ 223.470693][ T8276] ? __fget_files+0x29/0x470 [ 223.475302][ T8276] ? __fget_files+0x3f3/0x470 [ 223.480001][ T8276] v4l2_ioctl+0x189/0x1e0 [ 223.484357][ T8276] ? __pfx_v4l2_ioctl+0x10/0x10 [ 223.489401][ T8276] __se_sys_ioctl+0xf9/0x170 [ 223.494053][ T8276] do_syscall_64+0xf3/0x230 [ 223.498571][ T8276] ? clear_bhb_loop+0x35/0x90 [ 223.503284][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.509227][ T8276] RIP: 0033:0x7f522257dff9 [ 223.513662][ T8276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.533306][ T8276] RSP: 002b:00007f52232c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.541762][ T8276] RAX: ffffffffffffffda RBX: 00007f5222735f80 RCX: 00007f522257dff9 [ 223.549759][ T8276] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000004 [ 223.557751][ T8276] RBP: 00007f52225f0296 R08: 0000000000000000 R09: 0000000000000000 [ 223.565737][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.573746][ T8276] R13: 0000000000000000 R14: 00007f5222735f80 R15: 00007f522285fa28 [ 223.581782][ T8276] [ 223.594271][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.610329][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 223.619289][ T8276] Mem-Info: [ 223.624658][ T8276] active_anon:5910 inactive_anon:0 isolated_anon:0 [ 223.624658][ T8276] active_file:11414 inactive_file:38267 isolated_file:0 [ 223.624658][ T8276] unevictable:1323 dirty:248 writeback:0 [ 223.624658][ T8276] slab_reclaimable:8452 slab_unreclaimable:95133 [ 223.624658][ T8276] mapped:23700 shmem:2272 pagetables:919 [ 223.624658][ T8276] sec_pagetables:0 bounce:0 [ 223.624658][ T8276] kernel_misc_reclaimable:0 [ 223.624658][ T8276] free:1294365 free_pcp:943 free_cma:0 [ 223.631603][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.688001][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.697499][ T8276] Node 0 active_anon:21592kB inactive_anon:0kB active_file:45628kB inactive_file:152996kB unevictable:3756kB isolated(anon):0kB isolated(file):0kB mapped:94772kB dirty:988kB writeback:0kB shmem:5504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10332kB pagetables:3676kB sec_pagetables:0kB all_unreclaimable? no [ 223.741580][ T8294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.749078][ T8294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.764278][ T8294] batman_adv: batadv0: Removing interface: ip6gretap1 [ 223.817827][ T8276] Node 1 active_anon:2048kB inactive_anon:0kB active_file:28kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 223.863867][ T51] hsr_slave_0: left promiscuous mode [ 223.874857][ T51] hsr_slave_1: left promiscuous mode [ 223.882591][ T8276] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.930308][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.937803][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.954755][ T8276] lowmem_reserve[]: 0 2465 2466 0 0 [ 223.961221][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.985661][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.011785][ T8276] Node 0 DMA32 free:1233544kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:21452kB inactive_anon:0kB active_file:45628kB inactive_file:152168kB unevictable:3156kB writepending:988kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:5988kB local_pcp:3648kB free_cma:0kB [ 224.066803][ T51] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 224.091464][ T51] batman_adv: batadv0: Removing interface: virt_wifi0 [ 224.100342][ T8276] lowmem_reserve[]: 0 0 0 0 0 [ 224.105189][ T8276] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 224.158753][ T8276] lowmem_reserve[]: 0 0 0 0 0 [ 224.171244][ T5231] Bluetooth: hci4: command tx timeout [ 224.178864][ T8276] Node 1 Normal free:3927316kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:1748kB inactive_anon:0kB active_file:28kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:308kB local_pcp:308kB free_cma:0kB [ 224.214605][ T51] veth1_macvtap: left promiscuous mode [ 224.220879][ T51] veth0_macvtap: left promiscuous mode [ 224.226516][ T51] veth1_vlan: left promiscuous mode [ 224.231922][ T51] veth0_vlan: left promiscuous mode [ 224.237799][ T8276] lowmem_reserve[]: 0 0 0 0 0 [ 224.244653][ T8276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.270882][ T8276] Node 0 DMA32: 191*4kB (UME) 145*8kB (UME) 273*16kB (UME) 376*32kB (UME) 309*64kB (UME) 28*128kB (UME) 16*256kB (UME) 9*512kB (UME) 5*1024kB (UME) 3*2048kB (ME) 287*4096kB (M) = 1237204kB [ 224.337172][ T8276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 224.367320][ T8276] Node 1 Normal: 191*4kB (UME) 63*8kB (UME) 42*16kB (UME) 168*32kB (UME) 72*64kB (UME) 29*128kB (UE) 18*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 950*4096kB (M) = 3927316kB [ 224.419667][ T8276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.450319][ T8276] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.459700][ T8276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.518560][ T8276] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.536121][ T8276] 50966 total pagecache pages [ 224.540952][ T8276] 0 pages in swap cache [ 224.545147][ T8276] Free swap = 124648kB [ 224.549456][ T8276] Total swap = 124996kB [ 224.553750][ T8276] 2097051 pages RAM [ 224.557600][ T8276] 0 pages HighMem/MovableOnly [ 224.570463][ T8276] 427076 pages reserved [ 224.577293][ T8276] 0 pages cma reserved [ 224.621288][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 224.783481][ T25] usb 4-1: device descriptor read/64, error -71 [ 225.021764][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 225.174871][ T25] usb 4-1: device descriptor read/64, error -71 [ 225.298446][ T25] usb usb4-port1: attempt power cycle [ 225.496317][ T51] team0 (unregistering): Port device team_slave_1 removed [ 225.564573][ T51] team0 (unregistering): Port device team_slave_0 removed [ 225.658679][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 225.694394][ T25] usb 4-1: device descriptor read/8, error -71 [ 225.950433][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 226.003982][ T25] usb 4-1: device descriptor read/8, error -71 [ 226.134811][ T25] usb usb4-port1: unable to enumerate USB device [ 226.240526][ T5231] Bluetooth: hci4: command tx timeout [ 226.841701][ T8262] team0: Port device team_slave_0 added [ 226.861374][ T8262] team0: Port device team_slave_1 added [ 227.047739][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.062618][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.110350][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.166824][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.195169][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.263678][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.704963][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.743944][ T8262] hsr_slave_0: entered promiscuous mode [ 227.770720][ T8262] hsr_slave_1: entered promiscuous mode [ 227.797192][ T8262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.805723][ T8262] Cannot create hsr debugfs directory [ 228.045099][ T4624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.056164][ T4624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.068975][ T4624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.078042][ T4624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.086581][ T4624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.094448][ T4624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.264971][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.321400][ T4624] Bluetooth: hci4: command tx timeout [ 228.473483][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.480737][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.599147][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.657271][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.664529][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.817886][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.924781][ T8139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.065292][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.473662][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.654888][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.972354][ T8262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.087618][ T8365] chnl_net:caif_netlink_parms(): no params data found [ 230.106910][ T8262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.123870][ T8262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.157801][ T4624] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 230.160610][ T4624] Bluetooth: hci0: command tx timeout [ 230.199552][ T35] bridge_slave_1: left allmulticast mode [ 230.243978][ T35] bridge_slave_1: left promiscuous mode [ 230.249907][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.265955][ T35] bridge_slave_0: left allmulticast mode [ 230.278149][ T35] bridge_slave_0: left promiscuous mode [ 230.284288][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.333699][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 230.391764][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.732'. [ 230.411014][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 230.436257][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.732'. [ 231.055125][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.090775][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.109789][ T35] bond0 (unregistering): Released all slaves [ 231.264959][ T8262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.473440][ T8139] veth0_vlan: entered promiscuous mode [ 231.576700][ T8139] veth1_vlan: entered promiscuous mode [ 231.736824][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.764143][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.786596][ T8365] bridge_slave_0: entered allmulticast mode [ 231.808663][ T8365] bridge_slave_0: entered promiscuous mode [ 231.856894][ T35] hsr_slave_0: left promiscuous mode [ 231.867025][ T35] hsr_slave_1: left promiscuous mode [ 231.878442][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.893923][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.906061][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.918768][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.009303][ T35] veth1_macvtap: left promiscuous mode [ 232.015573][ T35] veth0_macvtap: left promiscuous mode [ 232.021354][ T35] veth1_vlan: left promiscuous mode [ 232.026713][ T35] veth0_vlan: left promiscuous mode [ 232.240734][ T4624] Bluetooth: hci0: command tx timeout [ 233.446937][ T35] team0 (unregistering): Port device team_slave_1 removed [ 233.540287][ T35] team0 (unregistering): Port device team_slave_0 removed [ 234.019606][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.033250][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.042560][ T8365] bridge_slave_1: entered allmulticast mode [ 234.060496][ T8365] bridge_slave_1: entered promiscuous mode [ 234.217287][ T8139] veth0_macvtap: entered promiscuous mode [ 234.269803][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.305414][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.321201][ T4624] Bluetooth: hci0: command tx timeout [ 234.388437][ T8139] veth1_macvtap: entered promiscuous mode [ 234.499530][ T8365] team0: Port device team_slave_0 added [ 234.544425][ T8365] team0: Port device team_slave_1 added [ 234.567447][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.613129][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.643536][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.763532][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.796486][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.818004][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.835112][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.844832][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.875285][ T5278] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 234.886843][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.921681][ T8139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.936250][ T8139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.951309][ T8139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.965943][ T8139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.995396][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.010292][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.065031][ T5278] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 235.078453][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.093112][ T5278] usb 3-1: Product: syz [ 235.097302][ T5278] usb 3-1: Manufacturer: syz [ 235.105872][ T5278] usb 3-1: SerialNumber: syz [ 235.129329][ T5278] usb 3-1: config 0 descriptor?? [ 235.140268][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.343576][ T8365] hsr_slave_0: entered promiscuous mode [ 235.357165][ T8365] hsr_slave_1: entered promiscuous mode [ 235.367352][ T8365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.378202][ T8365] Cannot create hsr debugfs directory [ 235.564655][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.710884][ T5291] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 235.722780][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.783540][ T5278] mos7840 3-1:0.0: required endpoints missing [ 235.806812][ T5278] usb 3-1: USB disconnect, device number 32 [ 235.881029][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 235.888796][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.902016][ T5291] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.909892][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.930627][ T5291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.940158][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.947633][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.951201][ T5291] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.985644][ T5291] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.013796][ T5291] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.027981][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.109675][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.116901][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.199162][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.211555][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.250609][ T5291] usb 4-1: usb_control_msg returned -32 [ 236.266614][ T5291] usbtmc 4-1:16.0: can't read capabilities [ 236.400335][ T4624] Bluetooth: hci0: command tx timeout [ 236.621854][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.680691][ T5280] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 236.785898][ T8365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.814545][ T8365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.842444][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.871479][ T8365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.878532][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.912552][ T8365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.924179][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.956665][ T8262] veth0_vlan: entered promiscuous mode [ 236.972216][ T5280] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 237.017284][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.058493][ T5280] usb 5-1: Product: syz [ 237.063804][ T8262] veth1_vlan: entered promiscuous mode [ 237.092730][ T5280] usb 5-1: Manufacturer: syz [ 237.102459][ T5280] usb 5-1: SerialNumber: syz [ 237.126393][ T5280] usb 5-1: config 0 descriptor?? [ 237.163882][ T5280] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 237.196309][ T8262] veth0_macvtap: entered promiscuous mode [ 237.207906][ T8262] veth1_macvtap: entered promiscuous mode [ 237.240232][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.274492][ T5280] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 237.315943][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.327833][ T5280] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 237.359398][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.398711][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.425628][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.426147][ T5280] usb 5-1: USB disconnect, device number 27 [ 237.438770][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.469437][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.490763][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.510498][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.511424][ T5280] garmin_gps 5-1:0.0: device disconnected [ 237.535934][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.552287][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.573000][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.606058][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.657237][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.708075][ T8262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.728209][ T8262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.748031][ T8262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.757106][ T8262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.801228][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.808455][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.861379][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.868545][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.020683][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 238.098611][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.150827][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.214637][ T9] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 238.248429][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.263632][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.294956][ T9] usb 3-1: Product: syz [ 238.300876][ T9] usb 3-1: Manufacturer: syz [ 238.305914][ T9] usb 3-1: SerialNumber: syz [ 238.318687][ T9] usb 3-1: config 0 descriptor?? [ 238.327285][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.377395][ T8521] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 238.398800][ T25] usb 4-1: USB disconnect, device number 28 [ 238.420592][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.503439][ T8365] veth0_vlan: entered promiscuous mode [ 238.528334][ T8365] veth1_vlan: entered promiscuous mode [ 238.716790][ T8365] veth0_macvtap: entered promiscuous mode [ 238.773447][ T8365] veth1_macvtap: entered promiscuous mode [ 238.868958][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.910939][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.929914][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.958806][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.977623][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.989654][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.005163][ T8564] vivid-001: ================= START STATUS ================= [ 239.018500][ T8564] vivid-001: Radio HW Seek Mode: Bounded [ 239.039450][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.060226][ T8564] vivid-001: Radio Programmable HW Seek: false [ 239.115297][ T8564] vivid-001: RDS Rx I/O Mode: Block I/O [ 239.151878][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.183081][ T8564] vivid-001: Generate RBDS Instead of RDS: false [ 239.199758][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.220331][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.226619][ T8564] vivid-001: RDS Reception: [ 239.231307][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.246115][ T8365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.250768][ T8564] true [ 239.256586][ T8365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.258248][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.277840][ T5278] usb 3-1: USB disconnect, device number 33 [ 239.304902][ T8365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.313849][ T8365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.322697][ T8365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.332023][ T8365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.410944][ T8564] [ 239.425196][ T8564] vivid-001: RDS Program Type: 0 inactive [ 239.477823][ T8564] vivid-001: RDS PS Name: inactive [ 239.491409][ T8564] vivid-001: RDS Radio Text: inactive [ 239.597148][ T8564] vivid-001: RDS Traffic Announcement: false inactive [ 239.637054][ T8564] vivid-001: RDS Traffic Program: false inactive [ 239.666450][ T8564] vivid-001: RDS Music: false inactive [ 239.697101][ T8564] vivid-001: ================== END STATUS ================== [ 239.734950][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.768296][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.950425][ T3036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.992380][ T3036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.456309][ T8584] batman_adv: batadv0: Adding interface: wlan1 [ 240.463494][ T8584] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.490800][ T8584] batman_adv: batadv0: Interface activated: wlan1 [ 240.622294][ T8584] batman_adv: batadv0: Interface deactivated: wlan1 [ 240.684967][ T8588] batman_adv: batadv0: Removing interface: wlan1 [ 240.859915][ T8595] vivid-002: ================= START STATUS ================= [ 240.870334][ T939] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 240.876079][ T8595] vivid-002: Radio HW Seek Mode: Bounded [ 240.908624][ T8595] vivid-002: Radio Programmable HW Seek: false [ 240.927466][ T8595] vivid-002: RDS Rx I/O Mode: Block I/O [ 240.941712][ T8595] vivid-002: Generate RBDS Instead of RDS: false [ 240.948159][ T8595] vivid-002: RDS Reception: true [ 240.953403][ T5238] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 240.970804][ T8591] "syz.1.763" (8591) uses obsolete ecb(arc4) skcipher [ 240.977787][ T8595] vivid-002: RDS Program Type: 0 inactive [ 240.987917][ T8595] vivid-002: RDS PS Name: inactive [ 241.027235][ T8595] vivid-002: RDS Radio Text: inactive [ 241.035349][ T939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.045867][ T939] usb 3-1: config 0 has no interfaces? [ 241.061586][ T939] usb 3-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 241.076830][ T939] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 241.086287][ T939] usb 3-1: Product: syz [ 241.105050][ T939] usb 3-1: SerialNumber: syz [ 241.110358][ T5238] usb 5-1: Using ep0 maxpacket: 8 [ 241.122240][ T8595] vivid-002: RDS Traffic Announcement: false inactive [ 241.122878][ T5238] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.167239][ T5238] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.185571][ T8595] vivid-002: RDS Traffic Program: false inactive [ 241.192112][ T939] usb 3-1: config 0 descriptor?? [ 241.198038][ T5238] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.208908][ T5238] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.225527][ T8595] vivid-002: RDS Music: false inactive [ 241.230214][ T5238] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.244920][ T8595] vivid-002: ================== END STATUS ================== [ 241.249961][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.484552][ T939] usb 3-1: USB disconnect, device number 34 [ 241.525967][ T5238] usb 5-1: usb_control_msg returned -32 [ 241.556085][ T5238] usbtmc 5-1:16.0: can't read capabilities [ 241.714220][ T8615] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0003 with DS=0x2 [ 242.034265][ T8619] program syz.1.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.412054][ T4624] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 242.523731][ T8636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.599531][ T8636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.044848][ T8650] binder: 8649:8650 unknown command 0 [ 243.070359][ T8650] binder: 8649:8650 ioctl c0306201 20000080 returned -22 [ 243.108874][ T8652] binder: 8647:8652 ioctl c0306201 0 returned -14 [ 243.452877][ T8666] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 243.452877][ T8666] program syz.3.788 not setting count and/or reply_len properly [ 243.479402][ T8666] netlink: 3 bytes leftover after parsing attributes in process `syz.3.788'. [ 243.520657][ T8666] ipvlan2: entered promiscuous mode [ 243.570224][ T5238] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 243.631365][ T5291] usb 5-1: USB disconnect, device number 28 [ 243.636290][ T8631] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 243.777635][ T5238] usb 2-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 243.800561][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.820199][ T5238] usb 2-1: Product: syz [ 243.824508][ T5238] usb 2-1: Manufacturer: syz [ 243.825442][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.829125][ T5238] usb 2-1: SerialNumber: syz [ 243.841869][ T5238] usb 2-1: config 0 descriptor?? [ 243.854797][ T5238] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected [ 243.862759][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 243.875364][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 243.893874][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 243.920437][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 243.928291][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 243.954014][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 243.979731][ T5238] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 243.989015][ T8674] FAULT_INJECTION: forcing a failure. [ 243.989015][ T8674] name failslab, interval 1, probability 0, space 0, times 0 [ 244.023765][ T5238] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 244.030761][ T8674] CPU: 1 UID: 0 PID: 8674 Comm: syz.2.792 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 244.042437][ T8674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.052639][ T8674] Call Trace: [ 244.055985][ T8674] [ 244.056001][ T8674] dump_stack_lvl+0x241/0x360 [ 244.056038][ T8674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.056063][ T8674] ? __pfx__printk+0x10/0x10 [ 244.056098][ T8674] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 244.056138][ T8674] ? __pfx___might_resched+0x10/0x10 [ 244.056175][ T8674] should_fail_ex+0x3b0/0x4e0 [ 244.056213][ T8674] should_failslab+0xac/0x100 [ 244.056241][ T8674] ? __alloc_skb+0x1c3/0x440 [ 244.056263][ T8674] kmem_cache_alloc_node_noprof+0x71/0x320 [ 244.056299][ T8674] __alloc_skb+0x1c3/0x440 [ 244.056328][ T8674] ? __pfx___alloc_skb+0x10/0x10 [ 244.056354][ T8674] ? netlink_autobind+0xd6/0x2f0 [ 244.056377][ T8674] ? netlink_autobind+0x2b0/0x2f0 [ 244.056406][ T8674] netlink_sendmsg+0x638/0xcb0 [ 244.056441][ T8674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.056463][ T8674] ? aa_sock_msg_perm+0x91/0x160 [ 244.056489][ T8674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.056507][ T8674] __sock_sendmsg+0x221/0x270 [ 244.056537][ T8674] ____sys_sendmsg+0x52a/0x7e0 [ 244.056568][ T8674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.056610][ T8674] __sys_sendmsg+0x292/0x380 [ 244.056640][ T8674] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.056678][ T8674] ? __pfx_vfs_write+0x10/0x10 [ 244.056726][ T8674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.056763][ T8674] ? do_syscall_64+0x100/0x230 [ 244.056789][ T8674] ? do_syscall_64+0xb6/0x230 [ 244.056813][ T8674] do_syscall_64+0xf3/0x230 [ 244.056836][ T8674] ? clear_bhb_loop+0x35/0x90 [ 244.056861][ T8674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.056903][ T8674] RIP: 0033:0x7f522257dff9 [ 244.056926][ T8674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.056947][ T8674] RSP: 002b:00007f52232c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.056974][ T8674] RAX: ffffffffffffffda RBX: 00007f5222735f80 RCX: 00007f522257dff9 [ 244.056992][ T8674] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 244.057007][ T8674] RBP: 00007f52232c4090 R08: 0000000000000000 R09: 0000000000000000 [ 244.057022][ T8674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.057037][ T8674] R13: 0000000000000000 R14: 00007f5222735f80 R15: 00007f522285fa28 [ 244.057065][ T8674] [ 244.161520][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.170370][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 244.256471][ T8659] syz_tun: entered promiscuous mode [ 244.261679][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 244.413520][ T8659] syz_tun: left promiscuous mode [ 244.584958][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.612110][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.640763][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.651982][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.661695][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.669117][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.718880][ T57] usb 2-1: USB disconnect, device number 20 [ 244.738367][ T57] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 244.757296][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.769430][ T57] keyspan 2-1:0.0: device disconnected [ 244.893960][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.191787][ T5291] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 245.367865][ T11] bridge_slave_1: left allmulticast mode [ 245.396873][ T5291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.415459][ T11] bridge_slave_1: left promiscuous mode [ 245.430333][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.489243][ T5291] usb 3-1: not running at top speed; connect to a high speed hub [ 245.498806][ T11] bridge_slave_0: left allmulticast mode [ 245.541375][ T11] bridge_slave_0: left promiscuous mode [ 245.547208][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.551107][ T5291] usb 3-1: config 81 has an invalid interface number: 159 but max is 0 [ 245.600810][ T5291] usb 3-1: config 81 has no interface number 0 [ 245.627242][ T5291] usb 3-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 245.675333][ T5291] usb 3-1: config 81 interface 159 has no altsetting 0 [ 245.693009][ T5291] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 245.720269][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.735298][ T5291] usb 3-1: Product: syz [ 245.739740][ T5291] usb 3-1: Manufacturer: syz [ 245.752019][ T5291] usb 3-1: SerialNumber: syz [ 245.792343][ T8706] vivid-004: ================= START STATUS ================= [ 245.819519][ T8688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.852600][ T8706] vivid-004: Radio HW Seek Mode: Bounded [ 245.889101][ T8706] vivid-004: Radio Programmable HW Seek: false [ 245.902792][ T8706] vivid-004: RDS Rx I/O Mode: Block I/O [ 245.909922][ T8706] vivid-004: Generate RBDS Instead of RDS: false [ 245.924150][ T8706] vivid-004: RDS Reception: true [ 245.966904][ T8706] vivid-004: RDS Program Type: 0 inactive [ 246.013213][ T8706] vivid-004: RDS PS Name: inactive [ 246.075091][ T8706] vivid-004: RDS Radio Text: inactive [ 246.111497][ T8706] vivid-004: RDS Traffic Announcement: false inactive [ 246.129480][ T8706] vivid-004: RDS Traffic Program: false inactive [ 246.157235][ T8706] vivid-004: RDS Music: false inactive [ 246.191956][ T8706] vivid-004: ================== END STATUS ================== [ 246.731691][ T4624] Bluetooth: hci4: command tx timeout [ 247.117551][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 247.186133][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.239538][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.269943][ T11] bond0 (unregistering): Released all slaves [ 247.305674][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 247.312780][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 247.331450][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.401259][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.500736][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.547655][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.620337][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.638867][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.642692][ T5291] kobil_sct 3-1:81.159: KOBIL USB smart card terminal converter detected [ 247.663400][ T5291] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 247.678438][ T5291] usb 3-1: USB disconnect, device number 35 [ 247.692016][ T8729] openvswitch: netlink: Actions may not be safe on all matching packets [ 247.725626][ T5291] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 247.737853][ T5291] kobil_sct 3-1:81.159: device disconnected [ 247.903561][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 247.926043][ T9] usbtmc 4-1:16.0: can't read capabilities [ 248.052289][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.066435][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.074679][ T8690] bridge_slave_0: entered allmulticast mode [ 248.085813][ T8690] bridge_slave_0: entered promiscuous mode [ 248.098142][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.160563][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.174848][ T9] usb 4-1: USB disconnect, device number 29 [ 248.185677][ T8690] bridge_slave_1: entered allmulticast mode [ 248.219042][ T8690] bridge_slave_1: entered promiscuous mode [ 248.240596][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 248.386470][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.404343][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 248.427785][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 248.464594][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.499789][ T11] hsr_slave_0: left promiscuous mode [ 248.505957][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 248.522534][ T25] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 248.534338][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.544804][ T25] usb 3-1: Product: syz [ 248.551598][ T25] usb 3-1: Manufacturer: syz [ 248.556584][ T25] usb 3-1: SerialNumber: syz [ 248.566223][ T11] hsr_slave_1: left promiscuous mode [ 248.584715][ T25] usb 3-1: config 0 descriptor?? [ 248.591465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.600912][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.615802][ T25] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 248.628797][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.637061][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.717607][ T11] veth1_macvtap: left promiscuous mode [ 248.754707][ T11] veth0_macvtap: left promiscuous mode [ 248.774109][ T11] veth1_vlan: left promiscuous mode [ 248.787378][ T11] veth0_vlan: left promiscuous mode [ 248.800362][ T4624] Bluetooth: hci4: command tx timeout [ 248.852044][ T25] usb 3-1: USB disconnect, device number 36 [ 251.354894][ T4624] Bluetooth: hci4: command tx timeout [ 251.364096][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 251.503100][ T8778] vivid-000: ================= START STATUS ================= [ 251.552502][ T8778] vivid-000: Radio HW Seek Mode: Bounded [ 251.575119][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.623901][ T8778] vivid-000: Radio Programmable HW Seek: false [ 251.634046][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.665906][ T8778] vivid-000: RDS Rx I/O Mode: Block I/O [ 251.685374][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 251.695598][ T8778] vivid-000: Generate RBDS Instead of RDS: false [ 251.740417][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.766925][ T8778] vivid-000: RDS Reception: true [ 251.778117][ T25] usb 2-1: config 0 descriptor?? [ 251.823573][ T8778] vivid-000: RDS Program Type: 0 inactive [ 251.829530][ T8778] vivid-000: RDS PS Name: inactive [ 251.980435][ T8778] vivid-000: RDS Radio Text: inactive [ 251.986097][ T8778] vivid-000: RDS Traffic Announcement: false inactive [ 252.117447][ T8778] vivid-000: RDS Traffic Program: false inactive [ 252.157430][ T8778] vivid-000: RDS Music: false inactive [ 252.210352][ T8778] vivid-000: ================== END STATUS ================== [ 252.261619][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 252.267698][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.321832][ T25] usb 2-1: USB disconnect, device number 21 [ 252.967922][ T5291] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 253.140427][ T5291] usb 4-1: Using ep0 maxpacket: 32 [ 253.167465][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 253.211394][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 253.271680][ T5291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 253.348619][ T5291] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 253.377813][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.410327][ T5291] usb 4-1: Product: syz [ 253.416425][ T5291] usb 4-1: Manufacturer: syz [ 253.433068][ T5291] usb 4-1: SerialNumber: syz [ 253.440499][ T4624] Bluetooth: hci4: command tx timeout [ 253.489051][ T5291] usb 4-1: config 0 descriptor?? [ 253.519563][ T5291] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 253.566526][ T5291] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 254.057583][ T11] team0 (unregistering): Port device team_slave_1 removed [ 254.194090][ T11] team0 (unregistering): Port device team_slave_0 removed [ 256.094911][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.102024][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.348001][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.488445][ T8690] team0: Port device team_slave_0 added [ 256.513023][ T8690] team0: Port device team_slave_1 added [ 256.719655][ T8785] veth1_vlan: left promiscuous mode [ 256.774804][ T8785] netlink: 'syz.3.820': attribute type 1 has an invalid length. [ 256.832617][ T8785] netlink: 'syz.3.820': attribute type 2 has an invalid length. [ 256.863179][ T8794] netlink: 44 bytes leftover after parsing attributes in process `syz.1.822'. [ 256.910915][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 257.356619][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.369944][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.424969][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.449710][ T8804] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 257.501293][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.636460][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.684128][ T5291] usb 4-1: USB disconnect, device number 30 [ 257.972684][ T4624] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 258.110386][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.172510][ T8812] netlink: 'syz.2.828': attribute type 3 has an invalid length. [ 258.240447][ T8812] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.828'. [ 258.745101][ T8810] syzkaller0: entered promiscuous mode [ 258.762197][ T8810] syzkaller0: entered allmulticast mode [ 259.111309][ T8690] hsr_slave_0: entered promiscuous mode [ 259.203850][ T8690] hsr_slave_1: entered promiscuous mode [ 259.310411][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.375718][ T8690] Cannot create hsr debugfs directory [ 261.395054][ T8822] delete_channel: no stack [ 261.731707][ T8831] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 269.358620][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.369277][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.396539][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.404867][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.413122][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.429235][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.483368][ T4624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.493759][ T4624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.514189][ T4624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.524589][ T4624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.534048][ T4624] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.542478][ T4624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.450590][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 270.462205][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 270.478576][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 270.489081][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 270.501442][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 270.510736][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 271.524215][ T5231] Bluetooth: hci6: command tx timeout [ 271.600398][ T5231] Bluetooth: hci7: command tx timeout [ 272.560453][ T5231] Bluetooth: hci8: command tx timeout [ 273.618089][ T5231] Bluetooth: hci6: command tx timeout [ 273.680321][ T5231] Bluetooth: hci7: command tx timeout [ 274.121014][ T4624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 274.131757][ T4624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 274.140456][ T4624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 274.149292][ T4624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 274.159397][ T4624] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 274.167132][ T4624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 274.640346][ T5231] Bluetooth: hci8: command tx timeout [ 275.684966][ T5231] Bluetooth: hci6: command tx timeout [ 275.760249][ T5231] Bluetooth: hci7: command tx timeout [ 276.242018][ T5231] Bluetooth: hci9: command tx timeout [ 276.724684][ T5231] Bluetooth: hci8: command tx timeout [ 277.760240][ T5231] Bluetooth: hci6: command tx timeout [ 277.848325][ T5231] Bluetooth: hci7: command tx timeout [ 278.320192][ T5231] Bluetooth: hci9: command tx timeout [ 278.800252][ T5231] Bluetooth: hci8: command tx timeout [ 280.400326][ T5231] Bluetooth: hci9: command tx timeout [ 282.463680][ T16] sched: DL replenish lagged too much [ 282.480342][ T5231] Bluetooth: hci9: command tx timeout [ 305.686874][ T4624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 305.697031][ T4624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 305.720310][ T4624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 305.730436][ T4624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 305.739612][ T4624] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 305.748207][ T4624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 307.840254][ T5231] Bluetooth: hci10: command tx timeout [ 309.375316][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 309.381554][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 309.920307][ T5231] Bluetooth: hci10: command tx timeout [ 312.000310][ T5231] Bluetooth: hci10: command tx timeout [ 314.080250][ T5231] Bluetooth: hci10: command tx timeout [ 317.524905][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.538210][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.353109][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 331.363191][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 331.376933][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 331.390432][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 331.412363][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 331.419983][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 331.590637][ T5234] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 331.601377][ T5234] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 331.625651][ T5234] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 331.635748][ T5234] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 331.644185][ T5234] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 331.652073][ T5234] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 332.059212][ T8882] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 332.069276][ T8882] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 332.078858][ T8882] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 332.088105][ T8882] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 332.096029][ T8882] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 332.107335][ T8882] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 335.157352][ T8888] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 335.173508][ T8888] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 335.183772][ T8888] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 335.194706][ T8888] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 335.204142][ T8888] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 335.213738][ T8888] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 340.160341][ T8891] Bluetooth: hci2: command 0x0406 tx timeout [ 350.320477][ T8892] Bluetooth: hci0: command 0x0406 tx timeout [ 367.115628][ T8895] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 367.128244][ T8895] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 367.150634][ T8895] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 367.163497][ T8895] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 367.171570][ T8895] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 367.179106][ T8895] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 370.809601][ T8899] Bluetooth: hci4: command 0x0406 tx timeout [ 378.963980][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.970578][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.981715][ T8904] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 391.992246][ T8904] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 392.001305][ T8904] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 392.010926][ T8904] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 392.018743][ T8904] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 392.026530][ T8904] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 392.454524][ T8908] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 392.467589][ T8908] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 392.500848][ T8908] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 392.513077][ T8908] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 392.521716][ T8908] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 392.529246][ T8908] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 392.763781][ T8911] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 392.774362][ T8911] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 392.783482][ T8911] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 392.799391][ T8911] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 392.809405][ T8911] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 392.816998][ T8911] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 395.662125][ T8915] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 395.672749][ T8915] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 395.681885][ T8915] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 395.690489][ T8915] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 395.699209][ T8915] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 395.706781][ T8915] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 396.491164][ T8917] Bluetooth: hci6: command 0x0406 tx timeout [ 396.497289][ T8917] Bluetooth: hci7: command 0x0406 tx timeout [ 396.510125][ T8917] Bluetooth: hci8: command 0x0406 tx timeout [ 396.516567][ T8920] Bluetooth: hci9: command 0x0406 tx timeout [ 416.080319][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 416.088134][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 416.136045][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.190250][ T30] task:kworker/u8:0 state:D stack:20480 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 416.227866][ T30] Workqueue: netns cleanup_net [ 416.308189][ T30] Call Trace: [ 416.335776][ T30] [ 416.338824][ T30] __schedule+0x1895/0x4b30 [ 416.394411][ T30] ? __pfx___schedule+0x10/0x10 [ 416.399403][ T30] ? __pfx_lock_release+0x10/0x10 [ 416.450334][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 416.455896][ T30] ? kthread_data+0x52/0xd0 [ 416.506197][ T30] ? schedule+0x90/0x320 [ 416.547858][ T30] ? wq_worker_sleeping+0x66/0x240 [ 416.553283][ T30] ? schedule+0x90/0x320 [ 416.557633][ T30] schedule+0x14b/0x320 [ 416.610089][ T30] schedule_preempt_disabled+0x13/0x30 [ 416.616721][ T30] __mutex_lock+0x6a7/0xd70 [ 416.660232][ T30] ? __mutex_lock+0x52a/0xd70 [ 416.665015][ T30] ? wg_destruct+0x25/0x2e0 [ 416.669567][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 416.729423][ T30] ? __pfx_free_percpu+0x10/0x10 [ 416.758046][ T30] ? kobject_put+0x272/0x480 [ 416.770373][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 416.775407][ T30] wg_destruct+0x25/0x2e0 [ 416.779799][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 416.830184][ T30] netdev_run_todo+0xe1a/0x1000 [ 416.835272][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 416.888966][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 416.910598][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 416.916862][ T30] default_device_exit_batch+0xa24/0xaa0 [ 416.970084][ T30] ? __pfx___might_resched+0x10/0x10 [ 416.975478][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 417.020272][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 417.025840][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 417.075978][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 417.088876][ T30] cleanup_net+0x89d/0xcc0 [ 417.116169][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 417.140896][ T30] ? process_scheduled_works+0x976/0x1850 [ 417.146812][ T30] process_scheduled_works+0xa63/0x1850 [ 417.190238][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.196841][ T30] ? assign_work+0x364/0x3d0 [ 417.226217][ T30] worker_thread+0x870/0xd30 [ 417.240307][ T30] ? __kthread_parkme+0x169/0x1d0 [ 417.245542][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.290079][ T30] kthread+0x2f0/0x390 [ 417.294348][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.335978][ T30] ? __pfx_kthread+0x10/0x10 [ 417.350284][ T30] ret_from_fork+0x4b/0x80 [ 417.354803][ T30] ? __pfx_kthread+0x10/0x10 [ 417.359447][ T30] ret_from_fork_asm+0x1a/0x30 [ 417.404110][ T30] [ 417.415020][ T30] INFO: task kworker/u8:7:2923 blocked for more than 144 seconds. [ 417.430603][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 417.438343][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.450078][ T30] task:kworker/u8:7 state:D stack:22384 pid:2923 tgid:2923 ppid:2 flags:0x00004000 [ 417.467132][ T30] Workqueue: events_unbound linkwatch_event [ 417.476325][ T30] Call Trace: [ 417.479657][ T30] [ 417.489385][ T30] __schedule+0x1895/0x4b30 [ 417.494373][ T30] ? __pfx___schedule+0x10/0x10 [ 417.499296][ T30] ? __pfx_lock_release+0x10/0x10 [ 417.513222][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 417.518780][ T30] ? kthread_data+0x52/0xd0 [ 417.528590][ T30] ? schedule+0x90/0x320 [ 417.535707][ T30] ? wq_worker_sleeping+0x66/0x240 [ 417.544884][ T30] ? schedule+0x90/0x320 [ 417.549214][ T30] schedule+0x14b/0x320 [ 417.559466][ T30] schedule_preempt_disabled+0x13/0x30 [ 417.650495][ T30] __mutex_lock+0x6a7/0xd70 [ 417.655116][ T30] ? __mutex_lock+0x52a/0xd70 [ 417.659854][ T30] ? linkwatch_event+0xe/0x60 [ 417.716790][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 417.729869][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 417.735734][ T30] ? process_scheduled_works+0x976/0x1850 [ 417.748213][ T30] linkwatch_event+0xe/0x60 [ 417.753260][ T30] process_scheduled_works+0xa63/0x1850 [ 417.758908][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.773563][ T30] ? assign_work+0x364/0x3d0 [ 417.778249][ T30] worker_thread+0x870/0xd30 [ 417.788125][ T30] ? __kthread_parkme+0x169/0x1d0 [ 417.794885][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.806688][ T30] kthread+0x2f0/0x390 [ 417.814189][ T30] ? __pfx_worker_thread+0x10/0x10 [ 417.819387][ T30] ? __pfx_kthread+0x10/0x10 [ 417.830223][ T30] ret_from_fork+0x4b/0x80 [ 417.834729][ T30] ? __pfx_kthread+0x10/0x10 [ 417.839367][ T30] ret_from_fork_asm+0x1a/0x30 [ 417.857456][ T30] [ 417.863205][ T30] INFO: task dhcpcd:4901 blocked for more than 145 seconds. [ 417.876347][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 417.885671][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.900272][ T30] task:dhcpcd state:D stack:20352 pid:4901 tgid:4901 ppid:4900 flags:0x00000002 [ 417.919130][ T30] Call Trace: [ 417.922949][ T30] [ 417.925938][ T30] __schedule+0x1895/0x4b30 [ 417.936897][ T30] ? __pfx___schedule+0x10/0x10 [ 417.942272][ T30] ? __pfx_lock_release+0x10/0x10 [ 417.947370][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 417.960649][ T30] ? schedule+0x90/0x320 [ 417.964983][ T30] schedule+0x14b/0x320 [ 417.969205][ T30] schedule_preempt_disabled+0x13/0x30 [ 417.984726][ T30] __mutex_lock+0x6a7/0xd70 [ 417.989318][ T30] ? __mutex_lock+0x52a/0xd70 [ 417.997970][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 418.006028][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.015632][ T30] ? apparmor_capable+0x13b/0x1b0 [ 418.025020][ T30] ? bpf_lsm_capable+0x9/0x10 [ 418.029784][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 418.038327][ T30] ? get_user_ifreq+0x1bb/0x200 [ 418.048186][ T30] inet_ioctl+0x3d7/0x4f0 [ 418.055484][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 418.066253][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 418.074671][ T30] sock_do_ioctl+0x158/0x460 [ 418.079610][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 418.088994][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.098858][ T30] sock_ioctl+0x626/0x8e0 [ 418.107231][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 418.114858][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.125903][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.136571][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 418.147318][ T30] __se_sys_ioctl+0xf9/0x170 [ 418.155668][ T30] do_syscall_64+0xf3/0x230 [ 418.164398][ T30] ? clear_bhb_loop+0x35/0x90 [ 418.169154][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.177957][ T30] RIP: 0033:0x7f936074ad49 [ 418.188020][ T30] RSP: 002b:00007ffc7c8d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.199336][ T30] RAX: ffffffffffffffda RBX: 00007f936067c6c0 RCX: 00007f936074ad49 [ 418.210351][ T30] RDX: 00007ffc7c8e3e68 RSI: 0000000000008914 RDI: 0000000000000018 [ 418.218404][ T30] RBP: 00007ffc7c8f4028 R08: 00007ffc7c8e3e28 R09: 00007ffc7c8e3dd8 [ 418.236516][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.249628][ T30] R13: 00007ffc7c8e3e68 R14: 0000000000000028 R15: 0000000000008914 [ 418.262897][ T30] [ 418.266090][ T30] INFO: task syz-executor:8690 blocked for more than 145 seconds. [ 418.277722][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 418.289376][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.301501][ T30] task:syz-executor state:D stack:21728 pid:8690 tgid:8690 ppid:1 flags:0x00000004 [ 418.324995][ T30] Call Trace: [ 418.328361][ T30] [ 418.335671][ T30] __schedule+0x1895/0x4b30 [ 418.345322][ T30] ? __pfx___schedule+0x10/0x10 [ 418.355539][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.363425][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 418.369060][ T30] ? schedule+0x90/0x320 [ 418.378365][ T30] schedule+0x14b/0x320 [ 418.385385][ T30] schedule_preempt_disabled+0x13/0x30 [ 418.396748][ T30] __mutex_lock+0x6a7/0xd70 [ 418.408668][ T30] ? __mutex_lock+0x52a/0xd70 [ 418.417491][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 418.427410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.436623][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 418.445530][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 418.454664][ T30] ? __lock_acquire+0x1384/0x2050 [ 418.459777][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.469101][ T30] netlink_rcv_skb+0x1e3/0x430 [ 418.479116][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.487794][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.497248][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.506428][ T30] netlink_unicast+0x7f6/0x990 [ 418.516571][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 418.524743][ T30] ? __virt_addr_valid+0x183/0x530 [ 418.534882][ T30] ? __check_object_size+0x48e/0x900 [ 418.543183][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 418.548039][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.559329][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 418.568319][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.579015][ T30] __sock_sendmsg+0x221/0x270 [ 418.586609][ T30] __sys_sendto+0x39b/0x4f0 [ 418.595138][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 418.603123][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.609245][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.619720][ T30] __x64_sys_sendto+0xde/0x100 [ 418.628718][ T30] do_syscall_64+0xf3/0x230 [ 418.639722][ T30] ? clear_bhb_loop+0x35/0x90 [ 418.649115][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.658240][ T30] RIP: 0033:0x7fbf0a77fe8c [ 418.667182][ T30] RSP: 002b:00007fbf0aa5f630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 418.677485][ T30] RAX: ffffffffffffffda RBX: 00007fbf0b464620 RCX: 00007fbf0a77fe8c [ 418.690116][ T30] RDX: 0000000000000020 RSI: 00007fbf0b464670 RDI: 0000000000000003 [ 418.698167][ T30] RBP: 0000000000000000 R08: 00007fbf0aa5f684 R09: 000000000000000c [ 418.714292][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 418.727820][ T30] R13: 0000000000000000 R14: 00007fbf0b464670 R15: 0000000000000000 [ 418.740131][ T30] [ 418.746712][ T30] INFO: task syz.4.832:8845 blocked for more than 146 seconds. [ 418.757241][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 418.768954][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.783030][ T30] task:syz.4.832 state:D stack:26816 pid:8845 tgid:8835 ppid:8139 flags:0x00000004 [ 418.801948][ T30] Call Trace: [ 418.805383][ T30] [ 418.808361][ T30] __schedule+0x1895/0x4b30 [ 418.827757][ T30] ? __pfx___schedule+0x10/0x10 [ 418.833226][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.839202][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 418.850998][ T30] ? schedule+0x90/0x320 [ 418.855425][ T30] schedule+0x14b/0x320 [ 418.859651][ T30] schedule_preempt_disabled+0x13/0x30 [ 418.872875][ T30] __mutex_lock+0x6a7/0xd70 [ 418.877518][ T30] ? __mutex_lock+0x52a/0xd70 [ 418.888087][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 418.896190][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 418.905288][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 418.913105][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 418.918306][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.928892][ T30] ? ref_tracker_free+0x643/0x7e0 [ 418.938973][ T30] netlink_rcv_skb+0x1e3/0x430 [ 418.947750][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.956668][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.967800][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.976012][ T30] netlink_unicast+0x7f6/0x990 [ 418.985946][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 418.995051][ T30] ? __virt_addr_valid+0x183/0x530 [ 419.004280][ T30] ? __check_object_size+0x48e/0x900 [ 419.009652][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 419.017513][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.026784][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 419.035754][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.048852][ T30] __sock_sendmsg+0x221/0x270 [ 419.058206][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 419.068429][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.076851][ T30] __sys_sendmsg+0x292/0x380 [ 419.086676][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.094750][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.105074][ T30] ? do_syscall_64+0x100/0x230 [ 419.113756][ T30] ? do_syscall_64+0xb6/0x230 [ 419.118515][ T30] do_syscall_64+0xf3/0x230 [ 419.127174][ T30] ? clear_bhb_loop+0x35/0x90 [ 419.137744][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.148509][ T30] RIP: 0033:0x7fdad7f7dff9 [ 419.155988][ T30] RSP: 002b:00007fdad8cd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.169316][ T30] RAX: ffffffffffffffda RBX: 00007fdad8136130 RCX: 00007fdad7f7dff9 [ 419.180131][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 419.188184][ T30] RBP: 00007fdad7ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 419.203705][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.218818][ T30] R13: 0000000000000000 R14: 00007fdad8136130 R15: 00007fdad825fa28 [ 419.234378][ T30] [ 419.237558][ T30] INFO: task syz.2.833:8846 blocked for more than 146 seconds. [ 419.248947][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 419.260737][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.269477][ T30] task:syz.2.833 state:D stack:25184 pid:8846 tgid:8846 ppid:7505 flags:0x00004004 [ 419.288843][ T30] Call Trace: [ 419.295290][ T30] [ 419.298292][ T30] __schedule+0x1895/0x4b30 [ 419.311261][ T30] ? __pfx___schedule+0x10/0x10 [ 419.316309][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.327965][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.333932][ T30] ? schedule+0x90/0x320 [ 419.338261][ T30] schedule+0x14b/0x320 [ 419.346261][ T30] schedule_preempt_disabled+0x13/0x30 [ 419.357869][ T30] __mutex_lock+0x6a7/0xd70 [ 419.365282][ T30] ? __mutex_lock+0x52a/0xd70 [ 419.373966][ T30] ? tun_chr_close+0x3b/0x1b0 [ 419.378735][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 419.388780][ T30] tun_chr_close+0x3b/0x1b0 [ 419.397686][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 419.408023][ T30] __fput+0x23f/0x880 [ 419.416225][ T30] task_work_run+0x24f/0x310 [ 419.423842][ T30] ? __pfx_task_work_run+0x10/0x10 [ 419.429299][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 419.439431][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 419.449146][ T30] do_syscall_64+0x100/0x230 [ 419.457902][ T30] ? clear_bhb_loop+0x35/0x90 [ 419.468169][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.479088][ T30] RIP: 0033:0x7f522257dff9 [ 419.486361][ T30] RSP: 002b:00007f522285fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 419.498833][ T30] RAX: 0000000000000000 RBX: 00007f5222737a80 RCX: 00007f522257dff9 [ 419.510199][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 419.518250][ T30] RBP: 00007f5222737a80 R08: 0000000000000006 R09: 00007f522285fe7f [ 419.533006][ T30] R10: 00000000003ffbd0 R11: 0000000000000246 R12: 0000000000040809 [ 419.547604][ T30] R13: 00007f522285fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 419.559540][ T30] [ 419.566679][ T30] INFO: task syz.2.833:8848 blocked for more than 146 seconds. [ 419.577119][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 419.588873][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.606404][ T30] task:syz.2.833 state:D stack:25496 pid:8848 tgid:8846 ppid:7505 flags:0x00000004 [ 419.619632][ T30] Call Trace: [ 419.631282][ T30] [ 419.634296][ T30] __schedule+0x1895/0x4b30 [ 419.638893][ T30] ? __pfx___schedule+0x10/0x10 [ 419.651730][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.657696][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.668564][ T30] ? schedule+0x90/0x320 [ 419.674517][ T30] schedule+0x14b/0x320 [ 419.678751][ T30] schedule_preempt_disabled+0x13/0x30 [ 419.690617][ T30] __mutex_lock+0x6a7/0xd70 [ 419.695217][ T30] ? __mutex_lock+0x52a/0xd70 [ 419.699948][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 419.712884][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 419.718010][ T30] ? __might_fault+0xc6/0x120 [ 419.729024][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 419.736895][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 419.747244][ T30] ? __fget_files+0x3f3/0x470 [ 419.754769][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 419.766917][ T30] __se_sys_ioctl+0xf9/0x170 [ 419.774390][ T30] do_syscall_64+0xf3/0x230 [ 419.778967][ T30] ? clear_bhb_loop+0x35/0x90 [ 419.787874][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.798443][ T30] RIP: 0033:0x7f522257dff9 [ 419.807926][ T30] RSP: 002b:00007f52232c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.819169][ T30] RAX: ffffffffffffffda RBX: 00007f5222735f80 RCX: 00007f522257dff9 [ 419.830055][ T30] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 000000000000000c [ 419.838114][ T30] RBP: 00007f52225f0296 R08: 0000000000000000 R09: 0000000000000000 [ 419.862881][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.875040][ T30] R13: 0000000000000000 R14: 00007f5222735f80 R15: 00007f522285fa28 [ 419.887659][ T30] [ 419.895617][ T30] INFO: task syz.2.833:8849 blocked for more than 147 seconds. [ 419.907162][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 419.918837][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.938516][ T30] task:syz.2.833 state:D stack:27392 pid:8849 tgid:8846 ppid:7505 flags:0x00000004 [ 419.949411][ T30] Call Trace: [ 419.959726][ T30] [ 419.965077][ T30] __schedule+0x1895/0x4b30 [ 419.969700][ T30] ? __pfx___schedule+0x10/0x10 [ 419.983421][ T30] ? __pfx_lock_release+0x10/0x10 [ 419.988549][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 419.996989][ T30] ? schedule+0x90/0x320 [ 420.005470][ T30] schedule+0x14b/0x320 [ 420.009725][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.018163][ T30] __mutex_lock+0x6a7/0xd70 [ 420.027865][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.035418][ T30] ? tun_chr_close+0x3b/0x1b0 [ 420.044147][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.049254][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 420.059769][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.070142][ T30] tun_chr_close+0x3b/0x1b0 [ 420.074734][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 420.079918][ T30] __fput+0x23f/0x880 [ 420.092185][ T30] __x64_sys_close+0x7f/0x110 [ 420.096960][ T30] do_syscall_64+0xf3/0x230 [ 420.106807][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.113138][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.119151][ T30] RIP: 0033:0x7f522257dff9 [ 420.128982][ T30] RSP: 002b:00007f52232a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 420.148037][ T30] RAX: ffffffffffffffda RBX: 00007f5222736058 RCX: 00007f522257dff9 [ 420.156547][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 420.172247][ T30] RBP: 00007f52225f0296 R08: 0000000000000000 R09: 0000000000000000 [ 420.184552][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.195427][ T30] R13: 0000000000000000 R14: 00007f5222736058 R15: 00007f522285fa28 [ 420.209482][ T30] [ 420.214564][ T30] INFO: task syz.2.833:8850 blocked for more than 147 seconds. [ 420.228387][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 420.236571][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.254958][ T30] task:syz.2.833 state:D stack:26840 pid:8850 tgid:8846 ppid:7505 flags:0x00000004 [ 420.274623][ T30] Call Trace: [ 420.277981][ T30] [ 420.283209][ T30] __schedule+0x1895/0x4b30 [ 420.287814][ T30] ? __pfx___schedule+0x10/0x10 [ 420.300220][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.305366][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.318133][ T30] ? schedule+0x90/0x320 [ 420.323134][ T30] schedule+0x14b/0x320 [ 420.327368][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.339299][ T30] __mutex_lock+0x6a7/0xd70 [ 420.345274][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.356311][ T30] ? dev_ioctl+0x706/0x1340 [ 420.361321][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.366409][ T30] ? security_capable+0xbc/0x2d0 [ 420.379716][ T30] ? dev_load+0x21/0x1f0 [ 420.384237][ T30] dev_ioctl+0x706/0x1340 [ 420.388628][ T30] sock_do_ioctl+0x240/0x460 [ 420.403060][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 420.408285][ T30] sock_ioctl+0x626/0x8e0 [ 420.416759][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 420.424524][ T30] ? __fget_files+0x29/0x470 [ 420.429184][ T30] ? __fget_files+0x3f3/0x470 [ 420.439040][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 420.446774][ T30] __se_sys_ioctl+0xf9/0x170 [ 420.456281][ T30] do_syscall_64+0xf3/0x230 [ 420.465701][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.475221][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.484293][ T30] RIP: 0033:0x7f522257dff9 [ 420.488775][ T30] RSP: 002b:00007f5221fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.502486][ T30] RAX: ffffffffffffffda RBX: 00007f5222736130 RCX: 00007f522257dff9 [ 420.516315][ T30] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 000000000000000b [ 420.526978][ T30] RBP: 00007f52225f0296 R08: 0000000000000000 R09: 0000000000000000 [ 420.540149][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.548207][ T30] R13: 0000000000000000 R14: 00007f5222736130 R15: 00007f522285fa28 [ 420.565280][ T30] [ 420.568455][ T30] INFO: task syz-executor:8858 blocked for more than 147 seconds. [ 420.583733][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 420.595385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.613331][ T30] task:syz-executor state:D stack:26816 pid:8858 tgid:8858 ppid:1 flags:0x00004004 [ 420.629970][ T30] Call Trace: [ 420.636150][ T30] [ 420.639142][ T30] __schedule+0x1895/0x4b30 [ 420.647843][ T30] ? __pfx___schedule+0x10/0x10 [ 420.656516][ T30] ? __pfx_lock_release+0x10/0x10 [ 420.666611][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 420.674999][ T30] ? schedule+0x90/0x320 [ 420.684069][ T30] schedule+0x14b/0x320 [ 420.688305][ T30] schedule_preempt_disabled+0x13/0x30 [ 420.696832][ T30] __mutex_lock+0x6a7/0xd70 [ 420.706810][ T30] ? __mutex_lock+0x52a/0xd70 [ 420.715461][ T30] ? register_nexthop_notifier+0x84/0x290 [ 420.726506][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 420.734960][ T30] ? __asan_memset+0x23/0x50 [ 420.739631][ T30] register_nexthop_notifier+0x84/0x290 [ 420.749245][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 420.757958][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 420.769263][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 420.778335][ T30] ? __asan_memset+0x23/0x50 [ 420.787633][ T30] ops_init+0x31e/0x590 [ 420.797229][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 420.807601][ T30] setup_net+0x287/0x9e0 [ 420.814732][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 420.825397][ T30] ? __pfx_setup_net+0x10/0x10 [ 420.833074][ T30] copy_net_ns+0x33f/0x570 [ 420.837577][ T30] create_new_namespaces+0x425/0x7b0 [ 420.848554][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 420.857230][ T30] ksys_unshare+0x619/0xc10 [ 420.865761][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 420.876678][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.890203][ T30] ? do_syscall_64+0x100/0x230 [ 420.895069][ T30] __x64_sys_unshare+0x38/0x40 [ 420.899878][ T30] do_syscall_64+0xf3/0x230 [ 420.911961][ T30] ? clear_bhb_loop+0x35/0x90 [ 420.916728][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.926764][ T30] RIP: 0033:0x7f0de6b7f7f7 [ 420.935311][ T30] RSP: 002b:00007f0de6e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 420.947875][ T30] RAX: ffffffffffffffda RBX: 00007f0de6bf1a85 RCX: 00007f0de6b7f7f7 [ 420.964471][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 420.975321][ T30] RBP: 0000000000000000 R08: 00007f0de7867d60 R09: 0000000000000000 [ 420.990158][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 420.998208][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.012940][ T30] [ 421.016036][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 421.028081][ T30] INFO: task syz-executor:8860 blocked for more than 148 seconds. [ 421.042232][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 421.049920][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.067334][ T30] task:syz-executor state:D stack:25904 pid:8860 tgid:8860 ppid:1 flags:0x00004006 [ 421.079632][ T30] Call Trace: [ 421.090131][ T30] [ 421.093129][ T30] __schedule+0x1895/0x4b30 [ 421.097714][ T30] ? __pfx___schedule+0x10/0x10 [ 421.109471][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.114983][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.127948][ T30] ? schedule+0x90/0x320 [ 421.135700][ T30] schedule+0x14b/0x320 [ 421.139962][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.152364][ T30] __mutex_lock+0x6a7/0xd70 [ 421.156957][ T30] ? __mutex_lock+0x52a/0xd70 [ 421.168316][ T30] ? register_nexthop_notifier+0x84/0x290 [ 421.175969][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.187414][ T30] ? __asan_memset+0x23/0x50 [ 421.193271][ T30] register_nexthop_notifier+0x84/0x290 [ 421.198900][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 421.215400][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 421.226907][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 421.234778][ T30] ? __asan_memset+0x23/0x50 [ 421.239434][ T30] ops_init+0x31e/0x590 [ 421.248929][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 421.257093][ T30] setup_net+0x287/0x9e0 [ 421.266701][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 421.273970][ T30] ? __pfx_setup_net+0x10/0x10 [ 421.278867][ T30] copy_net_ns+0x33f/0x570 [ 421.296298][ T30] create_new_namespaces+0x425/0x7b0 [ 421.306869][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 421.315267][ T30] ksys_unshare+0x619/0xc10 [ 421.319926][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 421.330450][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.336526][ T30] ? do_syscall_64+0x100/0x230 [ 421.348959][ T30] __x64_sys_unshare+0x38/0x40 [ 421.354282][ T30] do_syscall_64+0xf3/0x230 [ 421.358863][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.370121][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.376109][ T30] RIP: 0033:0x7f9e9af7f7f7 [ 421.388930][ T30] RSP: 002b:00007f9e9b25ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 421.406105][ T30] RAX: ffffffffffffffda RBX: 00007f9e9aff1a85 RCX: 00007f9e9af7f7f7 [ 421.414631][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 421.428973][ T30] RBP: 0000000000000000 R08: 00007f9e9bc67d60 R09: 0000000000000000 [ 421.438392][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 421.454092][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.466555][ T30] [ 421.469735][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 421.486764][ T30] INFO: task syz-executor:8863 blocked for more than 148 seconds. [ 421.497196][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 421.510400][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.522577][ T30] task:syz-executor state:D stack:26400 pid:8863 tgid:8863 ppid:1 flags:0x00004004 [ 421.538742][ T30] Call Trace: [ 421.545461][ T30] [ 421.548465][ T30] __schedule+0x1895/0x4b30 [ 421.560473][ T30] ? __pfx___schedule+0x10/0x10 [ 421.565426][ T30] ? __pfx_lock_release+0x10/0x10 [ 421.577231][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 421.583337][ T30] ? schedule+0x90/0x320 [ 421.587922][ T30] schedule+0x14b/0x320 [ 421.599352][ T30] schedule_preempt_disabled+0x13/0x30 [ 421.605815][ T30] __mutex_lock+0x6a7/0xd70 [ 421.617352][ T30] ? __mutex_lock+0x52a/0xd70 [ 421.625670][ T30] ? register_nexthop_notifier+0x84/0x290 [ 421.636703][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 421.643404][ T30] ? __asan_memset+0x23/0x50 [ 421.648082][ T30] register_nexthop_notifier+0x84/0x290 [ 421.660099][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 421.666000][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 421.678881][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 421.686533][ T30] ? __asan_memset+0x23/0x50 [ 421.697505][ T30] ops_init+0x31e/0x590 [ 421.702638][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 421.708094][ T30] setup_net+0x287/0x9e0 [ 421.722590][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 421.728238][ T30] ? __pfx_setup_net+0x10/0x10 [ 421.739496][ T30] copy_net_ns+0x33f/0x570 [ 421.745320][ T30] create_new_namespaces+0x425/0x7b0 [ 421.757013][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 421.763412][ T30] ksys_unshare+0x619/0xc10 [ 421.768000][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 421.780065][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 421.786240][ T30] ? do_syscall_64+0x100/0x230 [ 421.800228][ T30] __x64_sys_unshare+0x38/0x40 [ 421.805632][ T30] do_syscall_64+0xf3/0x230 [ 421.817976][ T30] ? clear_bhb_loop+0x35/0x90 [ 421.823099][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.829067][ T30] RIP: 0033:0x7fe94037f7f7 [ 421.845045][ T30] RSP: 002b:00007fe94065ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 421.861227][ T30] RAX: ffffffffffffffda RBX: 00007fe9403f1a85 RCX: 00007fe94037f7f7 [ 421.869286][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 421.886903][ T30] RBP: 0000000000000000 R08: 00007fe941067d60 R09: 0000000000000000 [ 421.897851][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 421.910206][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 421.918285][ T30] [ 421.933193][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 421.947795][ T30] [ 421.947795][ T30] Showing all locks held in the system: [ 421.958576][ T30] 4 locks held by kworker/0:1/9: [ 421.969101][ T30] 4 locks held by kworker/u8:0/11: [ 421.977153][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 421.995752][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.014052][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 422.027749][ T30] #3: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 422.039446][ T30] 3 locks held by kworker/u8:1/12: [ 422.050394][ T30] #0: ffff88814be38148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.068086][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.090082][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 422.099735][ T30] 1 lock held by khungtaskd/30: [ 422.112114][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 422.128934][ T30] 5 locks held by kworker/u9:0/53: [ 422.135751][ T30] #0: ffff888066f10948 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.152101][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.173889][ T30] #2: ffff88805faa0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 422.186695][ T30] #3: ffff88805faa0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 422.200055][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 422.209961][ T30] 2 locks held by kworker/u8:6/1301: [ 422.225612][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 422.239935][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 422.258220][ T30] 3 locks held by kworker/u8:7/2923: [ 422.267456][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.283409][ T30] #1: ffffc90009837d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.305097][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 422.317887][ T30] 3 locks held by kworker/u8:10/3036: [ 422.327328][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.342198][ T30] #1: ffffc90009c67d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.359763][ T30] #2: ffff888061410768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 422.377211][ T30] 5 locks held by kworker/u9:1/4624: [ 422.384686][ T30] #0: ffff88807fa7a148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.403744][ T30] #1: ffffc9000d66fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.423966][ T30] #2: ffff88807af70d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 422.436951][ T30] #3: ffff88807af70078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 422.452261][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 422.470127][ T30] 1 lock held by klogd/4676: [ 422.474821][ T30] 1 lock held by dhcpcd/4901: [ 422.479526][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 422.496241][ T30] 2 locks held by getty/4985: [ 422.502609][ T30] #0: ffff88803237a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 422.521270][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 422.537766][ T30] 4 locks held by kworker/u9:2/5231: [ 422.546487][ T30] #0: ffff888071030148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.560345][ T30] #1: ffffc90003e27d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.578832][ T30] #2: ffff88806006c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 422.589287][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 422.607336][ T30] 5 locks held by kworker/u9:3/5233: [ 422.613072][ T30] #0: ffff8880280ba148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.630284][ T30] #1: ffffc90003e37d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.650634][ T30] #2: ffff8880640f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 422.666105][ T30] #3: ffff8880640f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 422.678891][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 422.693972][ T30] 4 locks held by kworker/u9:4/5234: [ 422.699325][ T30] #0: ffff888049984148 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.719917][ T30] #1: ffffc90003e47d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.740061][ T30] #2: ffff888069ec8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 422.757935][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 422.769029][ T30] 3 locks held by kworker/0:4/5238: [ 422.779414][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 422.802063][ T30] #1: ffffc90003e87d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 422.819910][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 422.838088][ T30] 1 lock held by syz-executor/8690: [ 422.845435][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 422.861469][ T30] 2 locks held by syz.3.827/8809: [ 422.866562][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 422.882970][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 422.908482][ T30] 1 lock held by syz.1.830/8824: [ 422.914954][ T30] 1 lock held by syz.4.832/8845: [ 422.926232][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 422.937038][ T30] 1 lock held by syz.2.833/8846: [ 422.949202][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 422.959466][ T30] 1 lock held by syz.2.833/8848: [ 422.978542][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 422.989471][ T30] 1 lock held by syz.2.833/8849: [ 423.000056][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 423.009166][ T30] 1 lock held by syz.2.833/8850: [ 423.020542][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 423.029731][ T30] 2 locks held by syz-executor/8858: [ 423.049304][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.063069][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.076761][ T30] 2 locks held by syz-executor/8860: [ 423.086228][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.098829][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.113041][ T30] 2 locks held by syz-executor/8863: [ 423.118385][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.135338][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.153562][ T30] 2 locks held by syz-executor/8868: [ 423.158927][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.172651][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.187264][ T30] 2 locks held by syz-executor/8873: [ 423.196519][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.213495][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.228863][ T30] 2 locks held by syz-executor/8880: [ 423.238967][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.251403][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.266909][ T30] 4 locks held by kworker/u9:5/8882: [ 423.275949][ T30] #0: ffff88806d775948 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.291339][ T30] #1: ffffc90004607d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.312087][ T30] #2: ffff888031d00078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 423.327323][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 423.346070][ T30] 2 locks held by syz-executor/8883: [ 423.351840][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.367809][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.378329][ T30] 5 locks held by kworker/u9:6/8884: [ 423.392152][ T30] #0: ffff88802424b148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.411967][ T30] #1: ffffc90009797d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.428916][ T30] #2: ffff8880286acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 423.441710][ T30] #3: ffff8880286ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 423.460268][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 423.479350][ T30] 2 locks held by syz-executor/8886: [ 423.485104][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.502018][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.517449][ T30] 4 locks held by kworker/u9:7/8888: [ 423.524573][ T30] #0: ffff88803566f148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.545104][ T30] #1: ffffc900097b7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.564123][ T30] #2: ffff888035550078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 423.582779][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 423.597408][ T30] 2 locks held by syz-executor/8890: [ 423.605621][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.619180][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.633124][ T30] 5 locks held by kworker/u9:8/8891: [ 423.638476][ T30] #0: ffff888056aef948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.656529][ T30] #1: ffffc900097d7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.673411][ T30] #2: ffff888060078d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 423.688051][ T30] #3: ffff888060078078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 423.706336][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 423.719627][ T30] 4 locks held by kworker/u9:9/8892: [ 423.730107][ T30] #0: ffff88804a331948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.747511][ T30] #1: ffffc900094c7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.762217][ T30] #2: ffff88804a338078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 423.780414][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 423.797358][ T30] 5 locks held by kworker/u9:10/8895: [ 423.806024][ T30] #0: ffff8880627f0948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.824265][ T30] #1: ffffc900097f7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.839766][ T30] #2: ffff888028810d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 423.857673][ T30] #3: ffff888028810078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 423.876086][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 423.889647][ T30] 2 locks held by syz-executor/8897: [ 423.901631][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 423.916240][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 423.929036][ T30] 4 locks held by kworker/u9:11/8899: [ 423.939759][ T30] #0: ffff88806057f948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 423.960060][ T30] #1: ffffc90009817d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 423.979391][ T30] #2: ffff888037578078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 423.989861][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 424.010111][ T30] 4 locks held by kworker/u9:12/8904: [ 424.015560][ T30] #0: ffff88803cda8948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 424.037506][ T30] #1: ffffc90009a47d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 424.050167][ T30] #2: ffff88804c580078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 424.070168][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 424.090071][ T30] 2 locks held by syz-executor/8906: [ 424.095427][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 424.110425][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 424.129537][ T30] 5 locks held by kworker/u9:13/8908: [ 424.137133][ T30] #0: ffff888064d7a148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 424.154908][ T30] #1: ffffc90009a57d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 424.177094][ T30] #2: ffff88807e588d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 424.188969][ T30] #3: ffff88807e588078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 424.203991][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 424.215701][ T30] 2 locks held by syz-executor/8910: [ 424.228493][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 424.246450][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 424.258418][ T30] 4 locks held by kworker/u9:14/8911: [ 424.269745][ T30] #0: ffff888039732948 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 424.288491][ T30] #1: ffffc90009a87d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 424.307908][ T30] #2: ffff888088360078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 424.319816][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 424.336911][ T30] 2 locks held by syz-executor/8913: [ 424.344716][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 424.360077][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 424.377354][ T30] 5 locks held by kworker/u9:15/8914: [ 424.383183][ T30] #0: ffff888024f1e948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 424.400284][ T30] #1: ffffc90009aa7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 424.422650][ T30] #2: ffff88805e280d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 424.439011][ T30] #3: ffff88805e280078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 424.449335][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 424.465613][ T30] 4 locks held by kworker/u9:16/8915: [ 424.472795][ T30] #0: ffff888083833148 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 424.492962][ T30] #1: ffffc90009ab7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 424.513331][ T30] #2: ffff8880842f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 424.526170][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 424.540191][ T30] 5 locks held by kworker/u9:17/8916: [ 424.545629][ T30] #0: ffff888056aa6948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 424.563806][ T30] #1: ffffc90009ac7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 424.585228][ T30] #2: ffff8880282f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 424.599763][ T30] #3: ffff8880282f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 424.616157][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 424.627442][ T30] 2 locks held by syz-executor/8921: [ 424.639182][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 424.650494][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 424.667088][ T30] [ 424.669526][ T30] ============================================= [ 424.669526][ T30] [ 424.679520][ T30] NMI backtrace for cpu 1 [ 424.683907][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 424.694460][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.704553][ T30] Call Trace: [ 424.707868][ T30] [ 424.710832][ T30] dump_stack_lvl+0x241/0x360 [ 424.715556][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.720794][ T30] ? __pfx__printk+0x10/0x10 [ 424.725446][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 424.730437][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 424.735957][ T30] ? _printk+0xd5/0x120 [ 424.740163][ T30] ? __pfx__printk+0x10/0x10 [ 424.744797][ T30] ? __wake_up_klogd+0xcc/0x110 [ 424.749697][ T30] ? __pfx__printk+0x10/0x10 [ 424.754358][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 424.759440][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 424.765473][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 424.771503][ T30] watchdog+0xff4/0x1040 [ 424.775800][ T30] ? watchdog+0x1ea/0x1040 [ 424.780269][ T30] ? __pfx_watchdog+0x10/0x10 [ 424.784992][ T30] kthread+0x2f0/0x390 [ 424.789097][ T30] ? __pfx_watchdog+0x10/0x10 [ 424.793824][ T30] ? __pfx_kthread+0x10/0x10 [ 424.798453][ T30] ret_from_fork+0x4b/0x80 [ 424.802926][ T30] ? __pfx_kthread+0x10/0x10 [ 424.807556][ T30] ret_from_fork_asm+0x1a/0x30 [ 424.812389][ T30] [ 424.816293][ T30] Sending NMI from CPU 1 to CPUs 0: [ 424.821831][ C0] NMI backtrace for cpu 0 [ 424.821846][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 424.821868][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 424.821881][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 424.821912][ C0] RIP: 0010:unwind_get_return_address+0x51/0x90 [ 424.821933][ C0] Code: 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 cb 37 bd 00 48 8b 3b e8 23 72 1e 00 85 c0 74 14 <43> 80 3c 37 00 74 08 48 89 df e8 b0 37 bd 00 48 8b 03 eb 02 31 c0 [ 424.821950][ C0] RSP: 0018:ffffc90000006620 EFLAGS: 00000202 [ 424.821965][ C0] RAX: 0000000000000001 RBX: ffffc90000006688 RCX: ffffffff917b9000 [ 424.821979][ C0] RDX: ffffffff91966601 RSI: ffffc90000000000 RDI: ffffffff81808e88 [ 424.821994][ C0] RBP: ffffc900000066d0 R08: ffffc900000066d0 R09: 0000000000000000 [ 424.822006][ C0] R10: ffffc90000006690 R11: fffff52000000cd4 R12: ffff88801ceb0000 [ 424.822021][ C0] R13: ffffffff81808f50 R14: dffffc0000000000 R15: 1ffff92000000cd1 [ 424.822035][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 424.822051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.822064][ C0] CR2: 0000001b3070eff8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 424.822080][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.822092][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.822104][ C0] Call Trace: [ 424.822111][ C0] [ 424.822119][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 424.822142][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 424.822171][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 424.822193][ C0] ? nmi_handle+0x2a/0x5a0 [ 424.822220][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 424.822244][ C0] ? nmi_handle+0x14f/0x5a0 [ 424.822262][ C0] ? nmi_handle+0x2a/0x5a0 [ 424.822282][ C0] ? unwind_get_return_address+0x51/0x90 [ 424.822300][ C0] ? default_do_nmi+0x63/0x160 [ 424.822323][ C0] ? exc_nmi+0x123/0x1f0 [ 424.822344][ C0] ? end_repeat_nmi+0xf/0x53 [ 424.822362][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 424.822389][ C0] ? __init_begin+0x41000/0x41000 [ 424.822407][ C0] ? use_tsc_delay+0x21/0x30 [ 424.822433][ C0] ? stack_trace_save+0x118/0x1d0 [ 424.822453][ C0] ? unwind_get_return_address+0x51/0x90 [ 424.822472][ C0] ? unwind_get_return_address+0x51/0x90 [ 424.822491][ C0] ? use_tsc_delay+0x21/0x30 [ 424.822515][ C0] ? unwind_get_return_address+0x51/0x90 [ 424.822534][ C0] [ 424.822540][ C0] [ 424.822547][ C0] arch_stack_walk+0xfd/0x150 [ 424.822569][ C0] ? stack_trace_save+0x118/0x1d0 [ 424.822593][ C0] stack_trace_save+0x118/0x1d0 [ 424.822615][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 424.822645][ C0] ? __lock_acquire+0x1384/0x2050 [ 424.822674][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 424.822695][ C0] kasan_save_stack+0x3f/0x60 [ 424.822737][ C0] ? __phys_addr+0xba/0x170 [ 424.822755][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 424.822783][ C0] call_rcu+0x167/0xa70 [ 424.822807][ C0] ? __pfx_call_rcu+0x10/0x10 [ 424.822830][ C0] ? __phys_addr+0xba/0x170 [ 424.822851][ C0] kmem_cache_free+0x2fc/0x420 [ 424.822875][ C0] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 424.822903][ C0] ? nf_conntrack_free+0x2fd/0x390 [ 424.822930][ C0] nf_conntrack_free+0x2fd/0x390 [ 424.822957][ C0] nf_conntrack_in+0xb51/0x1890 [ 424.822996][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 424.823028][ C0] ? ipt_do_table+0x312/0x1860 [ 424.823056][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 424.823085][ C0] ? ip_route_me_harder+0xc98/0x1300 [ 424.823107][ C0] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 424.823130][ C0] ? ipv4_conntrack_local+0x120/0x200 [ 424.823156][ C0] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 424.823180][ C0] nf_hook_slow+0xc3/0x220 [ 424.823204][ C0] ? __pfx_dst_output+0x10/0x10 [ 424.823230][ C0] nf_hook+0x2c4/0x450 [ 424.823255][ C0] ? nf_hook+0x9e/0x450 [ 424.823277][ C0] ? __pfx_nf_hook+0x10/0x10 [ 424.823302][ C0] ? __pfx_dst_output+0x10/0x10 [ 424.823330][ C0] ? ip_fast_csum+0x1f0/0x2b0 [ 424.823352][ C0] __ip_local_out+0x3d9/0x4e0 [ 424.823376][ C0] ? __pfx_dst_output+0x10/0x10 [ 424.823402][ C0] ip_local_out+0x26/0x70 [ 424.823427][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 424.823459][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 424.823487][ C0] ? synproxy_pernet+0x45/0x270 [ 424.823515][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 424.823545][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 424.823571][ C0] ? NF_HOOK+0x29e/0x450 [ 424.823592][ C0] ? nf_ip_checksum+0x13a/0x500 [ 424.823625][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 424.823655][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 424.823684][ C0] ? __lock_acquire+0x1384/0x2050 [ 424.823711][ C0] ? __pfx_validate_chain+0x10/0x10 [ 424.823737][ C0] nft_do_chain+0x4ad/0x1da0 [ 424.823761][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 424.823786][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 424.823829][ C0] nft_do_chain_inet+0x418/0x6b0 [ 424.823857][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 424.823883][ C0] ? ipt_do_table+0x312/0x1860 [ 424.823917][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 424.823943][ C0] nf_hook_slow+0xc3/0x220 [ 424.823966][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 424.823988][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 424.824009][ C0] NF_HOOK+0x29e/0x450 [ 424.824030][ C0] ? NF_HOOK+0x9a/0x450 [ 424.824049][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 424.824070][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 424.824095][ C0] ? ip_rcv_finish+0x406/0x560 [ 424.824116][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 424.824137][ C0] NF_HOOK+0x3a4/0x450 [ 424.824156][ C0] ? __lock_acquire+0x1384/0x2050 [ 424.824184][ C0] ? NF_HOOK+0x9a/0x450 [ 424.824203][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 424.824222][ C0] ? ip_rcv_core+0x801/0xd10 [ 424.824242][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 424.824267][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 424.824287][ C0] __netif_receive_skb+0x2bf/0x650 [ 424.824312][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 424.824338][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 424.824360][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.824389][ C0] ? __pfx_lock_release+0x10/0x10 [ 424.824416][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 424.824448][ C0] process_backlog+0x662/0x15b0 [ 424.824475][ C0] ? process_backlog+0x33b/0x15b0 [ 424.824503][ C0] ? __pfx_process_backlog+0x10/0x10 [ 424.824527][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.824555][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.824584][ C0] __napi_poll+0xcb/0x490 [ 424.824608][ C0] net_rx_action+0x89b/0x1240 [ 424.824647][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 424.824671][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 424.824714][ C0] handle_softirqs+0x2c5/0x980 [ 424.824740][ C0] ? do_softirq+0x11b/0x1e0 [ 424.824765][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 424.824793][ C0] do_softirq+0x11b/0x1e0 [ 424.824816][ C0] [ 424.824822][ C0] [ 424.824829][ C0] ? __pfx_do_softirq+0x10/0x10 [ 424.824853][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 424.824879][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 424.824907][ C0] ? rcu_is_watching+0x15/0xb0 [ 424.824928][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 424.824953][ C0] ? wg_packet_decrypt_worker+0x2a9/0xd80 [ 424.824977][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 424.825003][ C0] ? wg_packet_decrypt_worker+0xcf/0xd80 [ 424.825030][ C0] wg_packet_decrypt_worker+0x2a9/0xd80 [ 424.825062][ C0] ? __pfx_validate_chain+0x10/0x10 [ 424.825083][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 424.825115][ C0] ? look_up_lock_class+0x77/0x170 [ 424.825143][ C0] ? register_lock_class+0x102/0x980 [ 424.825169][ C0] ? try_to_wake_up+0x5f4/0x1480 [ 424.825186][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 424.825209][ C0] ? __pfx_lock_release+0x10/0x10 [ 424.825236][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 424.825265][ C0] ? mark_lock+0x9a/0x360 [ 424.825285][ C0] ? __lock_acquire+0x1384/0x2050 [ 424.825325][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 424.825353][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.825382][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.825415][ C0] ? process_scheduled_works+0x976/0x1850 [ 424.825440][ C0] process_scheduled_works+0xa63/0x1850 [ 424.825478][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.825508][ C0] ? assign_work+0x364/0x3d0 [ 424.825534][ C0] worker_thread+0x870/0xd30 [ 424.825566][ C0] ? __kthread_parkme+0x169/0x1d0 [ 424.825594][ C0] ? __pfx_worker_thread+0x10/0x10 [ 424.825620][ C0] kthread+0x2f0/0x390 [ 424.825642][ C0] ? __pfx_worker_thread+0x10/0x10 [ 424.825667][ C0] ? __pfx_kthread+0x10/0x10 [ 424.825685][ C0] ret_from_fork+0x4b/0x80 [ 424.825711][ C0] ? __pfx_kthread+0x10/0x10 [ 424.825728][ C0] ret_from_fork_asm+0x1a/0x30 [ 424.825761][ C0] [ 425.738476][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 425.745573][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 425.756203][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.766299][ T30] Call Trace: [ 425.769608][ T30] [ 425.772572][ T30] dump_stack_lvl+0x241/0x360 [ 425.777293][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.782542][ T30] ? __pfx__printk+0x10/0x10 [ 425.787179][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.793216][ T30] ? vscnprintf+0x5d/0x90 [ 425.797591][ T30] panic+0x349/0x880 [ 425.801542][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 425.807842][ T30] ? __pfx_panic+0x10/0x10 [ 425.812307][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 425.817898][ T30] ? __irq_work_queue_local+0x137/0x410 [ 425.823492][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 425.828997][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 425.835193][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 425.841394][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 425.847596][ T30] watchdog+0x1033/0x1040 [ 425.851980][ T30] ? watchdog+0x1ea/0x1040 [ 425.856457][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.861180][ T30] kthread+0x2f0/0x390 [ 425.865285][ T30] ? __pfx_watchdog+0x10/0x10 [ 425.869999][ T30] ? __pfx_kthread+0x10/0x10 [ 425.874623][ T30] ret_from_fork+0x4b/0x80 [ 425.879082][ T30] ? __pfx_kthread+0x10/0x10 [ 425.883711][ T30] ret_from_fork_asm+0x1a/0x30 [ 425.888540][ T30] [ 425.891935][ T30] Kernel Offset: disabled [ 425.896275][ T30] Rebooting in 86400 seconds..