last executing test programs: 13m40.053255352s ago: executing program 4 (id=2933): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat6\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004']) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m39.655508418s ago: executing program 4 (id=2934): syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xb9, &(0x7f00000001c0)={0x5, 0xf, 0xb9, 0x1, [@generic={0xb4, 0x10, 0x4, "4996dc69d6e244740b7acc241189d4c5e482dd1df1301588472fa14db34774a660b0abd26bf03bb89b5703ff60483e10d27aefdb56a6834d470d8739324b89f04afb5ec35d6f7945c10f4b5fb12091286f2307e0986c5e61b2ff0f6593de8577cc53e07640f5e6ac6fa339569b4b4a93999476d7d8d0ba2601eda329bfd941b90a27d682131c44ba3deac026be8e55fefd7f05cdfa6db50e3088961a5d49f7b36a0817872e207f406d59292402fa0c6ddc"}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070036060000200000006a0200000ee60000bf050000000000003e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m38.883607301s ago: executing program 4 (id=2935): syz_open_dev$dmmidi(&(0x7f0000000080), 0xfc, 0x8081) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 13m37.930316339s ago: executing program 4 (id=2936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_io_uring_setup(0xefc, &(0x7f0000000200)={0x0, 0x2344, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xb8, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x10}}}}}}}]}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a80)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000000000, 0x0}) 13m34.810924533s ago: executing program 4 (id=2937): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13m33.825279457s ago: executing program 4 (id=2938): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 27.805077743s ago: executing program 3 (id=4570): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) readv(r1, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/229, 0xe5}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_mrelease(0xffffffffffffffff, 0x0) chroot(&(0x7f0000000000)='.\x00') r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) select(0x40, &(0x7f0000000000)={0xe, 0x92f, 0x9, 0x7, 0xd829, 0x882b, 0x7, 0x3}, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x46035}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x81) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f020}) 26.78270406s ago: executing program 3 (id=4573): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x130084, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r4, 0x5608, 0x1) fanotify_mark(r4, 0x8, 0x2, 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') write(0xffffffffffffffff, &(0x7f0000000100)="24000000580025000307f4f9002304000a04", 0x12) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)) 25.819914456s ago: executing program 3 (id=4576): prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x132ca000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$netlink(0x10, 0x3, 0x8) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/135, 0x87, 0x1, 0x36}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000037000000000000df9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0x35, 0xb2, &(0x7f0000000b40)="3487188b17b83a1bceb0a4291273fee0dd76ce28a412b233570f9b2a7fd7b26f34647a3883b87f2187fccd4f35a681d0d7f80bd210557bcfd732f331c1e52da8631fe9a875ed91ecd1921be5cca6c4d59b7baf5b1c90e118f56992b394b33a331fd21957509290cc4e235cd7c37fa40052795b2483decfb7db6a8b240ab85403166195f08f1a3b3719409a9b7383aba1fbc1c9a5c8952fad5e057bfa0645fc1406324780484cc75d725e79f8326a058507910e4960a34bf28c5629c8dd4222e43bdd98d7d36d9da984a4bffe342a7103fdb765c9faca0659c89d576888b99ac672b65f13", &(0x7f0000000a80)=""/178, 0x2f00, 0x0, 0xb2, 0xa5, &(0x7f00000007c0)="b520610c75311127840b58a6e774c99d77a2786b5e40e99889424fbfc0176e825cd85cc8f395cc354a00ece16e23cd51984ae79fe0c634560c8f464090ce6439af15b4b269d3c63de01fb868c4ab750db87f3cc40f48caf494b88d4d332dcdad4a30b6d5f0c4a12a74a2d9d5600fa499513a6fa2fb6e973865e244bef4ba9c1290e7442c310436080fcaef33c26eab89dcd4237911034b8003ac93f1c2867de6b54ea530fa73610bbf08f1001b0ee02c0e68", &(0x7f0000000280)="4594193652f8997f4d29b3e8405a4466c300c63ff495e8c50c594b8d6d810087ac1dedc27528541a8b7d1eb0272035752624cf47d2ec5be8a5f08e8d45b19091ceb83a4f2665d95c616ca53641eaa5f607aa8619659f9dfc324ad0988188708276ac86c6ed8f5fe1a0bfdd5e8fa42bccb29234405ced7db7ca0f4a70f7d56a2b67c8a2f9aa1007b42a8e08ca54e01a0c96f169c16c46c1842cbc02ce3d2044acf47c43000000000000000000", 0x0, 0x1ff}, 0x28) 23.338467688s ago: executing program 3 (id=4579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0xc23, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', r3, &(0x7f0000000180)='./file0\x00', 0x200) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x309}) 22.171125417s ago: executing program 3 (id=4583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020722500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x25e8d77370b87c2d) io_submit(0x0, 0x1, &(0x7f0000001440)=[0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000002200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000008400)={0x2, "1f6ef52deae8a57ae9b33a4058dc77c9a751a7af1cca71a1d1373f868e03bbfaf649bfe4809fa3892088dbab25c629321efe02f274af074c82ba8b4020e9db6c"}) 21.711363711s ago: executing program 3 (id=4587): clock_getres(0x2b85be7a825c77c0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) mq_open(0x0, 0x800, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x2) unshare(0x20000400) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2cc, 0x7ff, &(0x7f0000000440)) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)}], 0x1}, 0x0) getdents(r5, 0x0, 0x0) 11.024258498s ago: executing program 1 (id=4603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x94, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10.044855487s ago: executing program 1 (id=4607): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0) r0 = syz_open_dev$loop(0x0, 0x7, 0x20802) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/206, 0xce}, {0x0}], 0x2}, 0x10100) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x8, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e78edc0000008000000000fb80c92dc817d44dcdec00"}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140), 0x4) r5 = socket$inet(0x2, 0x3, 0x3) openat$kvm(0xffffff9c, &(0x7f00000003c0), 0x400000, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0xe, 0x0, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x108) 7.793038676s ago: executing program 1 (id=4614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x9000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x4b3c, 0xff}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007665746830"], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r6, @ANYBLOB="14005500f2a061aa1180009b0e07efaadd67505c0a0006000802110000010000050020013f00000008001f0116"], 0x4c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0001010}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x124, r4, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8001, 0x2d}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BSS_SELECT={0x3c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x7, 0xcd}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x10001}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xcd}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x9}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x71}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_IE={0xb3, 0x2a, [@prep={0x83, 0x1f, {{}, 0x62, 0xe1, @device_a, 0x7c9f, @void, 0xfffffff9, 0xff, @device_a, 0x400}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @measure_req={0x26, 0x3, {0x5, 0x1, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x30, 0x8}}, @preq={0x82, 0x51, {{0x0, 0x1}, 0x4, 0x74, 0x400, @device_a, 0x3, @void, 0xfffffffa, 0x3, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x323a}, {{0x1, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @device_b, 0x7}, {{0x1}}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffff2}]}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x2, 0x0, {0x9, 0xff, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x3}}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300eb990000000000000000fc0000000001000000000000000000fcac1e000100"/56], 0xb8}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 7.343918121s ago: executing program 2 (id=4616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0xc4) 7.206362351s ago: executing program 2 (id=4617): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6.939587567s ago: executing program 2 (id=4618): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3}}}}}]}}]}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900028073797a32000000000900010073797a3000000000080005400000000f5c0000000c0a01080000000000000000010000000900020073797a3200000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c00028008000440000000010900010073797a30"], 0xe0}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(generic-gcm-aesni))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x5, &(0x7f0000000240)='B', 0x1) pread64(r3, &(0x7f0000000080)=""/44, 0x2c, 0x95c5) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0x4e, {0x4e, 0x0, "47f800005e0000642afce1e923a454428f90ab20597d62feb3d192d7600335493cf52d9e802c4d42af20f6e97a0d78eaa04a76216bb180cc646396f46ff951f63b1c97ac57e21460a9052ee0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8) 6.858590783s ago: executing program 1 (id=4619): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000044199610b90661408801010203010902120001000000000904"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/96, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x200000000) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x7279, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) unshare(0x68040200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) timer_gettime(0x0, 0x0) unshare(0x22020000) 6.371482109s ago: executing program 0 (id=4621): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @multicast2}, &(0x7f0000000180)=0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005080)=""/9, 0x9}}], 0x1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x28000}], 0xbe, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xc0, [@rand_addr, @local]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 3.769617131s ago: executing program 2 (id=4622): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x100) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a440000000010109024400010100000009040000030206000005240600"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 3.199544765s ago: executing program 0 (id=4623): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60a9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x52c8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x3, 0x67) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) r4 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_int(r4, 0x1, 0x13, 0x0, &(0x7f0000000000)=0x62) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff, 0x0, 0x3}, 0x0, 0x0) 2.40363024s ago: executing program 1 (id=4624): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r6, 0x0, 0x25a5, 0x0) 2.255685081s ago: executing program 0 (id=4625): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x168, 0x11, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000f96e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop14', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/63, 0x3f) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x6, 0x9, &(0x7f0000000200)={{0xff, @local, 0x2, 0x0, 'lc\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x8000}}, 0x44) getsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000040)) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000b80)=ANY=[], 0x0, 0x0}) 1.36371414s ago: executing program 0 (id=4626): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.296455535s ago: executing program 1 (id=4627): socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) fanotify_mark(0xffffffffffffffff, 0x7a8, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000080)='veth1_to_bridge\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000240), 0x18) socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0xbf, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @broadcast, @void, {@x25={0x805, {0x1, 0x8, 0x13, "92476a6653b6cc1506d055b478e8050e12cce4f16aec7dcd9b14e73e2049f836126243ec6e2187ea13f498da30c4b4b95e3e0e66a4beced2eee4d2e62ba90bc6745e8d44a40cea64137ab13b450fb6a5dd04964f8d4cf4707144ece36d315761b77530d0c13470d4235afb892bfc13080dec9e7090d95b0714fbcd5f00881e8a0ce2435ed2ab265f809a78159060bd4c72b97ff4beff1e136a2d27ed15a8b7b46decc80a86d54b0ec66f14c88a2b"}}}}, 0x0) connect$can_j1939(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x3}, 0x18) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='=', @ANYBLOB=',group_id'], 0x1, 0x0, 0x0) 1.181241637s ago: executing program 0 (id=4628): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r1 = dup(r0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xc0000000, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x80041284, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x0, "340b7832ceffffffffffffffff36764a9987babd27000000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000200)=[{r6}, {r8}], 0x2, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x0, 0xc, 0x0, "9531fca40053bcb83a33b9264c0000000000006c7db58c799a99ec00"}) r11 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000340)={0x0, 0x0, 0x0, r11}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r11}) close(r9) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x1}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0}) 642.001781ms ago: executing program 0 (id=4629): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x80, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendmsg$nl_generic(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) 464.130659ms ago: executing program 2 (id=4630): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) r1 = socket(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100038d592000000000700784d555cea077a1d4f7ef5dd42bb2b3276de004181fb71199d488d254f1918bb637d6f1825e64f9996349ff32e0229417a9e2c1f9d11815d7cad05b01d28a3e1f2a7628cc1c27b33e24b36c20068fbd3e59eb363ae25a1f2d001ad691401a2698b9bef8c0eff54e94e4d895f1234a762d36e0dea65c7ea4db15a9e1e88", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000c0000000500080000000000"], 0x44}}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x5d}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r8, 0x1, 0x6, @local}, 0x10) 0s ago: executing program 2 (id=4631): socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x51, 0xae, 0x40, 0x451, 0x3410, 0xef1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xaa, 0xf, 0x60, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40142, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): d-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2192.957506][T15099] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2192.965064][T15099] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 2192.981309][T15099] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2193.150807][T27596] team0 (unregistering): Port device team_slave_1 removed [ 2193.248932][T27596] team0 (unregistering): Port device team_slave_0 removed [ 2193.804797][ T5238] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2193.814334][ T5238] Bluetooth: hci6: Injecting HCI hardware error event [ 2193.826154][T17520] Bluetooth: hci6: hardware error 0x00 [ 2194.025603][T31547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2194.045412][T31547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2194.085272][T31547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2194.119580][T31547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2194.315183][T31470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2194.422913][T31547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2194.441745][T31547] 8021q: adding VLAN 0 to HW filter on device team0 [ 2194.467790][T31470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2194.485458][T31470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2194.520182][T31470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2194.530910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2194.538137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2194.606375][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 2194.613610][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2194.977587][T31547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2195.149699][T31470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2195.324066][T31470] 8021q: adding VLAN 0 to HW filter on device team0 [ 2195.393708][T31547] veth0_vlan: entered promiscuous mode [ 2195.432834][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.440133][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2195.473846][T31654] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2195.503968][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.511226][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2195.561591][T31654] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2195.588955][T31654] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2195.627833][T31654] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2195.658541][T31547] veth1_vlan: entered promiscuous mode [ 2195.777669][T31791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.806121][T31791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.833172][T31547] veth0_macvtap: entered promiscuous mode [ 2195.841327][T31791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.871757][T31547] veth1_macvtap: entered promiscuous mode [ 2195.886489][T31791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.908566][T31470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2195.942051][T17520] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2195.967766][T31654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2196.014751][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.040432][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.059874][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.079134][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.111192][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.122748][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.133354][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.145575][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.156851][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.178375][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.204778][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2196.225490][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.247997][T31547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2196.283169][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.306195][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.325032][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.349836][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.370580][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.393869][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.409427][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.453947][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.485045][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.513490][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.533614][T31547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2196.588858][T31547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2196.645364][T31547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2196.862357][T31547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.889840][T31547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.898711][T31547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.928263][T31547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.962955][T31654] 8021q: adding VLAN 0 to HW filter on device team0 [ 2197.134651][ T6794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.245584][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2197.252841][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2197.366943][T31470] veth0_vlan: entered promiscuous mode [ 2197.401921][T31470] veth1_vlan: entered promiscuous mode [ 2197.636355][ T6794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.690509][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 2197.697632][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2197.944558][ T6794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.989054][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2198.002302][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2198.037372][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2198.070319][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2198.080664][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2198.088102][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2198.176869][ T6794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.265349][T31842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4397'. [ 2198.338829][T31842] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4397'. [ 2198.348853][T31842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4397'. [ 2198.412834][T31470] veth0_macvtap: entered promiscuous mode [ 2198.437781][T31470] veth1_macvtap: entered promiscuous mode [ 2198.544735][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2198.594698][T31654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2198.596539][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2198.782735][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.815176][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.838537][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.853016][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.864035][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.882149][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.899517][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.910804][T31863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.922329][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.934054][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.949255][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2198.971299][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2198.989263][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.009333][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2199.031695][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.049439][T31863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.065890][T31470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2199.079811][T31863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.093739][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.105557][T31863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.115789][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.141890][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.158040][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.184561][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.207181][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.229217][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.251196][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.269213][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.289907][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.308549][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.329145][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.349499][T31470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2199.374222][T31470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2199.401265][T31470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2199.452021][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2199.460887][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2199.501280][ T6794] bridge_slave_1: left allmulticast mode [ 2199.506986][ T6794] bridge_slave_1: left promiscuous mode [ 2199.529601][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.546968][ T6794] bridge_slave_0: left allmulticast mode [ 2199.554533][ T6794] bridge_slave_0: left promiscuous mode [ 2199.561698][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.153152][ T6794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.166191][ T6794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.178600][ T6794] bond0 (unregistering): Released all slaves [ 2200.185893][ T5238] Bluetooth: hci7: command tx timeout [ 2200.251583][T31470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2200.262555][T31470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2200.309332][T31470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2200.318113][T31470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2200.387903][T31654] veth0_vlan: entered promiscuous mode [ 2200.412870][T31843] chnl_net:caif_netlink_parms(): no params data found [ 2200.500855][T31893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.564681][T31893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.620832][T31893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.651646][T31893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.721202][T31899] dummy0: entered promiscuous mode [ 2200.731256][T31899] macsec1: entered promiscuous mode [ 2200.750630][T31899] macsec1: entered allmulticast mode [ 2200.758360][T31899] dummy0: entered allmulticast mode [ 2200.775475][T31899] dummy0: left allmulticast mode [ 2200.781321][T31899] dummy0: left promiscuous mode [ 2200.932148][T31654] veth1_vlan: entered promiscuous mode [ 2201.197399][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2201.208727][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2201.220219][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2201.238334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2201.393566][ T6794] hsr_slave_0: left promiscuous mode [ 2201.404432][ T6794] hsr_slave_1: left promiscuous mode [ 2201.428751][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2201.436699][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.450883][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2201.458677][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.651734][ T6794] veth1_macvtap: left promiscuous mode [ 2201.688233][ T6794] veth0_macvtap: left promiscuous mode [ 2201.705655][ T6794] veth1_vlan: left promiscuous mode [ 2201.740695][ T6794] veth0_vlan: left promiscuous mode [ 2202.263392][ T5238] Bluetooth: hci7: command tx timeout [ 2202.942936][T31939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4404'. [ 2203.927218][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 2203.968874][T31943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.984289][T31943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2204.079635][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 2204.349509][ T5238] Bluetooth: hci7: command tx timeout [ 2205.215813][T31843] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.223474][T31843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.232202][T31843] bridge_slave_0: entered allmulticast mode [ 2205.241741][T31843] bridge_slave_0: entered promiscuous mode [ 2205.251590][T31949] netlink: 'syz.0.4407': attribute type 11 has an invalid length. [ 2205.283378][T31843] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.290823][T31843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.298254][T31843] bridge_slave_1: entered allmulticast mode [ 2205.309693][T31843] bridge_slave_1: entered promiscuous mode [ 2205.396960][T31654] veth0_macvtap: entered promiscuous mode [ 2205.447355][T31843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.464339][T31843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.487456][T31952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4408'. [ 2205.512059][T31654] veth1_macvtap: entered promiscuous mode [ 2205.666805][T31843] team0: Port device team_slave_0 added [ 2205.690042][T31843] team0: Port device team_slave_1 added [ 2205.747120][T31843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.755854][T31843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.798525][T31843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2205.829378][T30570] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2205.842080][T31843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2205.863596][T31843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.909492][T31843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2205.953948][ T6794] IPVS: stop unused estimator thread 0... [ 2205.986592][T30570] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 2205.996177][T30570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.014660][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.017537][T30570] usb 1-1: Product: syz [ 2206.036531][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.045410][T30570] usb 1-1: Manufacturer: syz [ 2206.051118][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.057007][T30570] usb 1-1: SerialNumber: syz [ 2206.072197][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.090990][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.091082][T30570] usb 1-1: config 0 descriptor?? [ 2206.112061][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.125762][T30570] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 2206.138111][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.162948][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.182652][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.193607][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.214200][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.239945][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.261905][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.275007][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.287087][T31654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2206.327725][T31843] hsr_slave_0: entered promiscuous mode [ 2206.348145][ T4667] bcm5974 1-1:0.0: could not read from device [ 2206.356907][ T4667] bcm5974 1-1:0.0: could not read from device [ 2206.364960][T31843] hsr_slave_1: entered promiscuous mode [ 2206.375057][T30570] usb 1-1: USB disconnect, device number 5 [ 2206.379618][ T4667] bcm5974 1-1:0.0: could not read from device [ 2206.404042][ T4667] bcm5974 1-1:0.0: could not read from device [ 2206.419555][ T5238] Bluetooth: hci7: command tx timeout [ 2206.483641][T31688] udevd[31688]: Error opening device "/dev/input/event4": No such file or directory [ 2206.494562][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2206.496500][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.503819][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2206.515820][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.531767][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.542596][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.552552][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.563483][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2206.571195][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.581493][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2206.589194][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.600554][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.610645][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.622852][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.633785][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.644424][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.654588][T31654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2206.665736][T31654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.683484][T31654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2206.745247][T31654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.756802][T31654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.766285][T31654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2206.775383][T31654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.001287][ T6794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.017620][ T6794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.168912][T27596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2207.213370][T27596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2207.887120][ T29] audit: type=1326 audit(1728307425.911:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31983 comm="syz.2.4410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d497dff9 code=0x0 [ 2207.913910][T31843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2207.996810][T31843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2208.052551][T31843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2208.077271][T31843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2208.304861][T31843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2208.354210][T31843] 8021q: adding VLAN 0 to HW filter on device team0 [ 2208.382598][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.389823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2208.407029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.414231][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2208.562638][T31843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2208.725246][T31843] veth0_vlan: entered promiscuous mode [ 2208.791477][T31843] veth1_vlan: entered promiscuous mode [ 2208.918804][T31843] veth0_macvtap: entered promiscuous mode [ 2208.983422][T31843] veth1_macvtap: entered promiscuous mode [ 2209.074167][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.102832][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.129165][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.156017][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.188263][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.214361][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.235360][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.259184][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.280793][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.310167][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.329443][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.350237][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.379511][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.397533][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.418076][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2209.449213][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.473052][T31843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2209.494900][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.528857][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.553985][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.579888][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.590440][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.610722][T32016] netlink: 'syz.2.4412': attribute type 4 has an invalid length. [ 2209.618633][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.644330][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.655775][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.668349][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.679447][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.690795][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.715301][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.725810][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.749404][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.769581][T31843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2209.791795][T31843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2209.821074][T31843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2209.851051][T31843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.879204][T31843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.887980][T31843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2209.901299][T31843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2210.180350][T32029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'. [ 2210.197008][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2210.237905][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.269805][T32031] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 2210.269805][T32031] program syz.2.4415 not setting count and/or reply_len properly [ 2210.278809][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2210.294900][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.495043][T32036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4416'. [ 2210.517522][T32036] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4416'. [ 2210.541762][T32036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4416'. [ 2210.568330][T32036] fuse: Unknown parameter '&d' [ 2211.218547][T32048] xt_cgroup: invalid path, errno=-2 [ 2211.932728][T32048] vxcan1: entered promiscuous mode [ 2211.970188][T32048] vxcan1: left promiscuous mode [ 2211.988668][T32048] vxcan1: entered allmulticast mode [ 2212.094513][T32053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4421'. [ 2212.127782][T32053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4421'. [ 2212.156506][T32053] vcan0: entered promiscuous mode [ 2212.180054][T32053] vlan2: entered promiscuous mode [ 2212.255015][T32053] vcan0: left promiscuous mode [ 2213.049241][T15099] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2213.210941][T15099] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2213.226954][T15099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.249249][T15099] usb 2-1: config 0 descriptor?? [ 2213.260732][T15099] cp210x 2-1:0.0: cp210x converter detected [ 2213.464103][T32067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.481935][T32067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.523169][T32074] bond0: entered promiscuous mode [ 2213.528271][T32074] bond_slave_0: entered promiscuous mode [ 2213.549707][T32074] bond_slave_1: entered promiscuous mode [ 2213.566531][T32074] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2213.579893][T32075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4426'. [ 2213.610259][T32074] bond0: left promiscuous mode [ 2213.618894][T32074] bond_slave_0: left promiscuous mode [ 2213.637920][T32074] bond_slave_1: left promiscuous mode [ 2213.725384][T15099] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2213.927324][T19654] usb 2-1: USB disconnect, device number 122 [ 2213.966975][T19654] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2214.027052][T19654] cp210x 2-1:0.0: device disconnected [ 2214.405719][T32078] delete_channel: no stack [ 2214.450240][T17520] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2214.472018][T17520] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2214.483982][T17520] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2214.495952][T17520] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2214.505479][T17520] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2214.518210][T17520] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2214.629617][T32077] delete_channel: no stack [ 2214.934577][T32087] chnl_net:caif_netlink_parms(): no params data found [ 2215.049300][T19654] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2215.151735][T32087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.185973][T32087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.193888][T32087] bridge_slave_0: entered allmulticast mode [ 2215.201793][T32087] bridge_slave_0: entered promiscuous mode [ 2215.210984][T32087] bridge0: port 2(bridge_slave_1) entered blocking state [ 2215.218257][T32087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2215.227398][T32087] bridge_slave_1: entered allmulticast mode [ 2215.237194][T32087] bridge_slave_1: entered promiscuous mode [ 2215.281788][T19654] usb 2-1: Using ep0 maxpacket: 32 [ 2215.295572][T19654] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 2215.305299][T19654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.314696][T19654] usb 2-1: Product: syz [ 2215.318976][T19654] usb 2-1: Manufacturer: syz [ 2215.333347][T32087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2215.353361][T32087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2215.363065][T19654] usb 2-1: SerialNumber: syz [ 2215.407420][T19654] usb 2-1: config 0 descriptor?? [ 2215.434523][T19654] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 2215.443596][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 2215.453022][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 2215.464726][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 2215.472858][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 2215.481062][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 2215.488802][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 2215.496642][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 2215.518814][T32087] team0: Port device team_slave_0 added [ 2215.531911][T32087] team0: Port device team_slave_1 added [ 2215.555566][T19654] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2215.566218][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 2215.575599][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 2215.583367][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 2215.591263][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 2215.598987][T19654] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 2215.612268][T19654] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2215.613783][T32087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2215.855324][T32087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2216.173784][T32087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2216.188013][T32087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2216.195467][T32087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2216.225740][T32087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2216.303786][T32086] kvm: pic: non byte write [ 2216.338367][T19654] usb 2-1: USB disconnect, device number 123 [ 2216.386936][T19654] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2216.476243][T19654] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2216.511572][T19654] keyspan 2-1:0.0: device disconnected [ 2216.518398][T32087] hsr_slave_0: entered promiscuous mode [ 2216.531014][T32087] hsr_slave_1: entered promiscuous mode [ 2216.544899][T32087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2216.555022][T32087] Cannot create hsr debugfs directory [ 2216.561847][T32109] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2216.579398][ T5238] Bluetooth: hci8: command tx timeout [ 2216.764524][T32087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.863418][T32087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2216.879321][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2216.948074][T32087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.027358][T32087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.041747][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 2217.051366][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2217.069756][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2217.087349][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2217.162505][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 2217.179263][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.196082][ T9] usb 1-1: Product: syz [ 2217.200476][ T9] usb 1-1: Manufacturer: syz [ 2217.205310][ T9] usb 1-1: SerialNumber: syz [ 2217.230958][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input80 [ 2217.238219][T32116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4436'. [ 2217.284748][T32116] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4436'. [ 2217.303987][T32087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2217.311003][T32116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4436'. [ 2217.353705][T32116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'. [ 2217.402201][T32087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2217.428881][T32087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2217.477448][T32087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2217.491099][ T4667] bcm5974 1-1:1.0: could not read from device [ 2217.497977][ T9] usb 1-1: USB disconnect, device number 6 [ 2217.528410][T31688] bcm5974 1-1:1.0: could not read from device [ 2217.583084][T31688] udevd[31688]: Error opening device "/dev/input/event4": No such device [ 2217.651227][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2217.659013][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2217.683651][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2217.694738][T31688] udevd[31688]: Unable to EVIOCGABS device "/dev/input/event4" [ 2217.703070][T31688] udevd[31688]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 2217.739000][ T4682] udevd[4682]: worker [31688] terminated by signal 6 (Aborted) [ 2217.779309][ T4682] udevd[4682]: worker [31688] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input80/event4' [ 2217.885581][ T6794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.064172][ T6794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.138190][T32087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2218.273230][ T6794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.404427][ T6794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.567478][T32087] 8021q: adding VLAN 0 to HW filter on device team0 [ 2218.581706][T17520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2218.596061][T17520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2218.609293][T17520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2218.621243][T17520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2218.628916][T17520] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2218.637021][T17520] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2218.663929][ T5238] Bluetooth: hci8: command tx timeout [ 2218.765541][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.772734][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.818749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.825985][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2218.985754][T32133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4443'. [ 2219.000423][T32133] bond0: entered promiscuous mode [ 2219.046886][T32133] bond_slave_0: entered promiscuous mode [ 2219.084947][T32133] bond_slave_1: entered promiscuous mode [ 2219.256448][T32087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2219.636616][ T6794] bridge_slave_1: left allmulticast mode [ 2219.699594][ T6794] bridge_slave_1: left promiscuous mode [ 2219.719390][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.756080][ T6794] bridge_slave_0: left allmulticast mode [ 2219.777380][ T6794] bridge_slave_0: left promiscuous mode [ 2219.809856][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.533964][ T29] audit: type=1326 audit(1728307438.561:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32161 comm="syz.1.4446" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a6037dff9 code=0x0 [ 2220.757591][ T5238] Bluetooth: hci8: command tx timeout [ 2220.764452][T17520] Bluetooth: hci3: command tx timeout [ 2220.904397][ T6794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2220.917668][ T6794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2220.931875][ T6794] bond0 (unregistering): Released all slaves [ 2221.105682][T32087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2221.138164][T32128] chnl_net:caif_netlink_parms(): no params data found [ 2221.309007][T32087] veth0_vlan: entered promiscuous mode [ 2221.361694][T32087] veth1_vlan: entered promiscuous mode [ 2221.677163][ T6794] hsr_slave_0: left promiscuous mode [ 2221.769348][ T6794] hsr_slave_1: left promiscuous mode [ 2221.789561][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2221.797085][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2221.822276][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2221.839569][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2221.898993][ T6794] veth1_macvtap: left promiscuous mode [ 2221.919458][ T6794] veth0_macvtap: left promiscuous mode [ 2221.939250][ T6794] veth1_vlan: left promiscuous mode [ 2221.944813][ T6794] veth0_vlan: left promiscuous mode [ 2222.027102][T30577] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2222.102464][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.108951][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.213695][T30577] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.234606][T30577] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2222.272160][T30577] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2222.303746][T30577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.324281][T30577] usb 2-1: config 0 descriptor?? [ 2222.821005][ T5238] Bluetooth: hci8: command tx timeout [ 2222.826560][T17520] Bluetooth: hci3: command tx timeout [ 2223.267741][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 2223.356470][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 2224.282598][T32128] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.290291][T32128] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.297707][T32128] bridge_slave_0: entered allmulticast mode [ 2224.305596][T32128] bridge_slave_0: entered promiscuous mode [ 2224.328902][T32128] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.336397][T32128] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.344154][T32128] bridge_slave_1: entered allmulticast mode [ 2224.353555][T32128] bridge_slave_1: entered promiscuous mode [ 2224.481632][T32128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2224.522724][T32128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2224.675717][T32128] team0: Port device team_slave_0 added [ 2224.742271][T32128] team0: Port device team_slave_1 added [ 2224.850460][T32087] veth0_macvtap: entered promiscuous mode [ 2224.914779][T30577] usb 2-1: USB disconnect, device number 124 [ 2224.928276][T17520] Bluetooth: hci3: command tx timeout [ 2224.955030][T32128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2224.977806][T32128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.089299][T32128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2225.121777][T32087] veth1_macvtap: entered promiscuous mode [ 2225.136327][T32128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2225.153840][T32128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2225.219463][T32128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2225.291263][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.370089][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.399295][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.431704][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.450719][ T29] audit: type=1326 audit(1728307443.481:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32244 comm="syz.0.4460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f902057dff9 code=0x0 [ 2225.479157][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.499511][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.521866][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.539756][T32248] UHID_CREATE from different security context by process 91 (syz.0.4460), this is not allowed. [ 2225.546602][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.577088][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.588241][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.609505][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.639228][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.666373][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.679844][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.690764][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2225.705052][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.717597][T32087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2225.794815][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.820010][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.848356][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.864852][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.895174][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.940392][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2225.957978][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2225.989696][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.001569][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.012245][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.024684][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.035816][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.059623][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.072809][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.101387][T32087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2226.112682][T32087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2226.124373][T32087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2226.167353][T32128] hsr_slave_0: entered promiscuous mode [ 2226.174859][T32128] hsr_slave_1: entered promiscuous mode [ 2226.193186][T32128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2226.201321][T32128] Cannot create hsr debugfs directory [ 2226.222165][T32087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.238918][T32087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.270685][T32087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.351273][T32087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2226.903287][ T6800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.979760][T17520] Bluetooth: hci3: command tx timeout [ 2227.227911][ T6800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.309862][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2227.340915][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2227.617139][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2227.638369][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2227.650694][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2227.658816][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2227.672646][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2227.680447][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2227.824457][ T6800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.183774][ T6800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.451199][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2228.469364][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2228.822294][T32294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2228.849324][T30582] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2228.860792][T32294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.926780][ T6800] bridge_slave_1: left allmulticast mode [ 2228.935028][ T6800] bridge_slave_1: left promiscuous mode [ 2228.950001][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.972482][ T6800] bridge_slave_0: left allmulticast mode [ 2228.978283][ T6800] bridge_slave_0: left promiscuous mode [ 2228.989819][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.055145][T30582] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2229.089170][T30582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.114521][T30582] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2229.124505][T30582] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2229.139536][T30582] usb 2-1: Manufacturer: syz [ 2229.154000][T30582] usb 2-1: config 0 descriptor?? [ 2229.308729][T30582] rc_core: IR keymap rc-hauppauge not found [ 2229.349320][T30582] Registered IR keymap rc-empty [ 2229.355355][T30582] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2229.374749][T30582] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input81 [ 2229.780266][ T5238] Bluetooth: hci5: command tx timeout [ 2230.168072][ T6800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2230.190650][ T6800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2230.204908][ T6800] bond0 (unregistering): Released all slaves [ 2230.300369][T32288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 2230.380047][T32288] macsec1: entered allmulticast mode [ 2230.393980][T32288] veth1_macvtap: entered allmulticast mode [ 2230.449228][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4465'. [ 2230.635587][T32313] fuse: Bad value for 'fd' [ 2230.651019][T32303] veth1_macvtap (unregistering): left allmulticast mode [ 2231.076522][T32128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2231.120520][T32128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2231.153066][T19654] usb 2-1: USB disconnect, device number 125 [ 2231.200044][T30577] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 2231.285627][T32128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2231.302642][T32128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2231.322678][T32284] chnl_net:caif_netlink_parms(): no params data found [ 2231.421712][T30577] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 2231.444102][T30577] usb 1-1: config 0 has no interface number 0 [ 2231.479290][T30577] usb 1-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42 [ 2231.504166][T30577] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.538408][T30577] usb 1-1: config 0 descriptor?? [ 2231.571419][T30577] gspca_main: finepix-2.14.0 probing 04cb:013d [ 2231.760116][ T6800] hsr_slave_0: left promiscuous mode [ 2231.813983][ T6800] hsr_slave_1: left promiscuous mode [ 2231.854032][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2231.866748][T19654] usb 1-1: USB disconnect, device number 7 [ 2231.869800][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2231.873172][ T5238] Bluetooth: hci5: command tx timeout [ 2231.952481][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2231.981737][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2232.041215][T32344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.062866][T32344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.085879][ T6800] veth1_macvtap: left promiscuous mode [ 2232.119813][ T6800] veth0_macvtap: left promiscuous mode [ 2232.130586][ T6800] veth1_vlan: left promiscuous mode [ 2232.135963][ T6800] veth0_vlan: left promiscuous mode [ 2233.969241][T17520] Bluetooth: hci5: command tx timeout [ 2234.408437][ T6800] team0 (unregistering): Port device team_slave_1 removed [ 2234.419332][T17520] Bluetooth: hci4: command 0x0406 tx timeout [ 2234.548905][ T6800] team0 (unregistering): Port device team_slave_0 removed [ 2234.964311][T30582] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2235.120951][T30582] usb 1-1: Using ep0 maxpacket: 16 [ 2235.181082][T30582] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2235.211359][T30582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.222742][T30582] usb 1-1: Product: syz [ 2235.226969][T30582] usb 1-1: Manufacturer: syz [ 2235.231800][T30582] usb 1-1: SerialNumber: syz [ 2235.258576][T30582] usb 1-1: config 0 descriptor?? [ 2235.541020][T30582] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 2235.548304][T30582] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2235.693963][T32346] pim6reg: entered allmulticast mode [ 2235.700885][T32346] pim6reg: left allmulticast mode [ 2235.824516][T32284] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.842618][T32284] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.869582][T32284] bridge_slave_0: entered allmulticast mode [ 2235.885042][T32284] bridge_slave_0: entered promiscuous mode [ 2235.934836][T32284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.950708][T32284] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.978024][T32397] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 2235.978024][T32397] program syz.3.4476 not setting count and/or reply_len properly [ 2235.981316][T32284] bridge_slave_1: entered allmulticast mode [ 2236.022537][ T5238] Bluetooth: hci5: command tx timeout [ 2236.045999][T32284] bridge_slave_1: entered promiscuous mode [ 2236.072273][T32397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2236.159679][T32397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2236.178629][T32404] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 2236.194413][T30582] IPVS: starting estimator thread 0... [ 2236.208944][T32284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2236.256652][T32408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2236.311193][T32408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2236.349690][T32406] IPVS: using max 24 ests per chain, 57600 per kthread [ 2236.406645][T32284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2236.495805][T32027] usb 1-1: USB disconnect, device number 8 [ 2236.521676][T32284] team0: Port device team_slave_0 added [ 2236.620848][T32128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2236.657455][T32284] team0: Port device team_slave_1 added [ 2236.810175][T32284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2236.827494][T32284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2236.865333][T32284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2236.905531][T32128] 8021q: adding VLAN 0 to HW filter on device team0 [ 2236.960350][T32284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2237.024004][T32284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2237.080771][T32284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2237.210396][T32426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4480'. [ 2237.437532][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.444800][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2237.467958][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.475158][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2237.764125][T32284] hsr_slave_0: entered promiscuous mode [ 2237.800505][T32284] hsr_slave_1: entered promiscuous mode [ 2237.819238][T32284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2237.847509][T32284] Cannot create hsr debugfs directory [ 2238.049331][T15099] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2238.127504][T32128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2238.189216][T32128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2238.239228][T15099] usb 1-1: Using ep0 maxpacket: 32 [ 2238.257261][T15099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2238.273839][T15099] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2238.316408][T15099] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2238.336834][T15099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.359133][T15099] usb 1-1: Product: syz [ 2238.363551][T15099] usb 1-1: Manufacturer: syz [ 2238.368191][T15099] usb 1-1: SerialNumber: syz [ 2238.396511][T15099] usb 1-1: config 0 descriptor?? [ 2238.451250][T15099] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 2238.489393][T15099] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 2238.516394][T15099] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 2238.542667][T15099] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 2238.569832][T15099] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 2238.577498][T15099] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 2238.611292][T15099] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 2238.656913][T15099] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2238.683910][T15099] usb 1-1: USB disconnect, device number 9 [ 2238.832215][T15099] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2238.889946][T15099] keyspan 1-1:0.0: device disconnected [ 2239.021932][T32128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2239.570087][T32478] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4486'. [ 2239.773031][T32128] veth0_vlan: entered promiscuous mode [ 2239.822559][T32128] veth1_vlan: entered promiscuous mode [ 2240.040446][T32128] veth0_macvtap: entered promiscuous mode [ 2240.057907][T32128] veth1_macvtap: entered promiscuous mode [ 2240.242024][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.301417][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.329429][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2240.367269][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.399201][T15099] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2240.410848][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.457827][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.498225][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.529384][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.543146][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.551882][T15099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2240.564458][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.568967][T15099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 2240.579123][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.599869][ T46] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2240.621672][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.623948][T15099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2240.635015][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.699365][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.712908][T15099] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 2240.721496][ T46] usb 1-1: config 0 descriptor?? [ 2240.731477][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.739863][T15099] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.769288][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.789188][T15099] usb 2-1: Product: syz [ 2240.793623][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.803778][T15099] usb 2-1: Manufacturer: syz [ 2240.808686][T15099] usb 2-1: SerialNumber: syz [ 2240.822867][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.859641][T15099] usb 2-1: config 0 descriptor?? [ 2240.877928][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2240.929321][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2240.973861][T32128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2241.035799][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.118187][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.135637][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.189297][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.229364][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.247638][T15099] usb 2-1: USB disconnect, device number 126 [ 2241.272597][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.312145][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.339330][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.352771][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.374209][ T46] hid-led 0003:1D34:000A.0034: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 2241.389277][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.409130][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.435212][ T46] hid-led 0003:1D34:000A.0034: Dream Cheeky Webmail Notifier initialized [ 2241.469283][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.490643][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.509249][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.537201][T32128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.568535][T32128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.593237][T32128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2241.643957][T32128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.670045][T32128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.686556][T32128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.702795][T32128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.803492][T32498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.870790][T32498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2241.988313][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2241.996331][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.009887][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.017811][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.284657][T32284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2242.353326][T32284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2242.384648][T32284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2242.425935][T32284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2242.721853][T30577] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2242.875460][T32284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2242.928688][T30577] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2242.977082][T30577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.986339][T32284] 8021q: adding VLAN 0 to HW filter on device team0 [ 2243.014724][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2243.021895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2243.071976][T30568] usb 1-1: USB disconnect, device number 10 [ 2243.110840][T30577] usb 2-1: Product: syz [ 2243.127778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2243.134996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2243.145663][T30577] usb 2-1: Manufacturer: syz [ 2243.188672][T30577] usb 2-1: SerialNumber: syz [ 2243.239701][T30577] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2243.304779][T30582] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2243.356036][T32284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2243.474436][T32284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2243.802698][T32284] veth0_vlan: entered promiscuous mode [ 2243.805810][T32527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2243.892620][T32284] veth1_vlan: entered promiscuous mode [ 2244.141331][T32284] veth0_macvtap: entered promiscuous mode [ 2244.258376][T32284] veth1_macvtap: entered promiscuous mode [ 2244.400234][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.419423][T30582] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2244.438617][T30582] ath9k_htc: Failed to initialize the device [ 2244.473977][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.492709][T30582] usb 2-1: ath9k_htc: USB layer deinitialized [ 2244.578918][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.684041][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.758396][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.847213][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.938129][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.998853][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.047063][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.092227][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.125062][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.177460][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.213333][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.219806][T15099] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2245.262612][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.310099][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.345429][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.389180][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2245.429200][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.456964][T32284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2245.479444][ T9] usb 2-1: USB disconnect, device number 127 [ 2245.605875][T15099] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2245.618585][T15099] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2245.626472][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.674498][T15099] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2245.688165][T15099] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2245.718481][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.728593][T15099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.760646][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.778512][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.788917][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.799599][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.809697][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.820296][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.830255][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.840855][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.852028][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.869281][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.882029][T32546] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2245.890096][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.901636][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.912940][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.923492][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.933581][T32284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2245.944321][T32284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2245.960438][T32284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2245.988325][T32557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4497'. [ 2246.060180][T32284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.097104][T32284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.149262][T32284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.161491][T32284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.369250][ T6800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2246.398246][ T6800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2246.411802][T32563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'. [ 2246.495689][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2246.522265][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2246.995854][T15099] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 2247.008333][T15099] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input82 [ 2247.081568][T15099] usb 1-1: USB disconnect, device number 11 [ 2247.081626][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2247.271273][T32570] program syz.1.4500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2247.307566][T32570] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 2247.336091][T32570] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2247.599519][T30568] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2247.819209][T30568] usb 2-1: Using ep0 maxpacket: 16 [ 2247.826427][T30568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.838148][T30568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2247.849148][T30568] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 2247.859622][T30568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.953128][T30568] usb 2-1: config 0 descriptor?? [ 2248.384165][T30568] lenovo 0003:17EF:6009.0035: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 2248.548383][T32587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 2248.549501][T32585] fuse: Bad value for 'fd' [ 2248.570248][T32587] batadv0: entered promiscuous mode [ 2248.590021][T32587] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2248.627876][T32587] batadv0: left promiscuous mode [ 2248.662259][T32574] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4500'. [ 2248.681027][T19654] usb 2-1: USB disconnect, device number 2 [ 2250.693009][T32614] random: crng reseeded on system resumption [ 2250.872660][T32619] program syz.3.4515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2252.067596][ T29] audit: type=1326 audit(1728307470.091:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.2.4517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5f0d7dff9 code=0x0 [ 2252.349480][T19654] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2252.520781][T19654] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2252.539414][T19654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.557426][T19654] usb 2-1: config 0 descriptor?? [ 2252.577443][T19654] cp210x 2-1:0.0: cp210x converter detected [ 2253.076771][T32654] No such timeout policy "syz0" [ 2253.134445][T32654] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 2253.301787][T32661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.338301][T32661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.453485][T32656] @ÿ: renamed from veth0_vlan (while UP) [ 2253.749338][T15099] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2253.764664][T32669] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 2253.949801][T15099] usb 1-1: Using ep0 maxpacket: 32 [ 2253.957481][T15099] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2253.979578][T15099] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2253.988713][T15099] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2254.000520][T15099] usb 1-1: Product: syz [ 2254.004750][T15099] usb 1-1: Manufacturer: syz [ 2254.027540][T15099] usb 1-1: SerialNumber: syz [ 2254.047079][T15099] usb 1-1: config 0 descriptor?? [ 2254.062901][T32664] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 2254.445756][T32671] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2254.560958][T32671] kvm: pic: non byte read [ 2254.571581][T32671] kvm: pic: level sensitive irq not supported [ 2254.571794][T32671] kvm: pic: non byte read [ 2254.614482][T32671] kvm: pic: level sensitive irq not supported [ 2254.614613][T32671] kvm: pic: non byte read [ 2254.670749][T32671] kvm: pic: level sensitive irq not supported [ 2254.670871][T32671] kvm: pic: non byte read [ 2254.695994][T32671] kvm: pic: level sensitive irq not supported [ 2254.696564][T32671] kvm: pic: non byte read [ 2254.796115][T30570] IPVS: starting estimator thread 0... [ 2254.805572][T32679] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 2254.848095][T32682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2254.868662][T32682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2254.929596][T32680] IPVS: using max 17 ests per chain, 40800 per kthread [ 2255.620251][ T5238] Bluetooth: hci7: command tx timeout [ 2255.664598][T32691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.686448][T32691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.715385][T32691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4535'. [ 2255.746598][T32691] macsec1: entered allmulticast mode [ 2255.752251][T32691] veth1_macvtap: entered allmulticast mode [ 2255.766372][T32691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4535'. [ 2255.915920][T32691] veth1_macvtap (unregistering): left allmulticast mode [ 2256.825483][ T5238] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 2256.836928][ T5238] Bluetooth: hci8: Injecting HCI hardware error event [ 2256.846669][ T5238] Bluetooth: hci8: hardware error 0x00 [ 2256.961910][T32695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.974220][T32695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.620907][T19654] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -110 [ 2257.640508][T19654] cp210x 2-1:0.0: querying part number failed [ 2257.664652][T19654] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2258.081345][T32706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2258.093986][T32706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.229884][T32706] I/O error, dev loop7, sector 896 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 2258.267032][T32706] I/O error, dev loop7, sector 896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2258.275818][T32703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2258.280605][T32706] buffer_io_error: 4 callbacks suppressed [ 2258.280627][T32706] Buffer I/O error on dev loop7, logical block 112, async page read [ 2258.319549][T32703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.911079][ T5238] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 2258.973718][T32710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2258.984193][T32710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2261.771503][T32734] binder: 32732:32734 ioctl c0306201 0 returned -14 [ 2263.194526][T30568] IPVS: starting estimator thread 0... [ 2263.202737][T32744] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 2263.309286][T32745] IPVS: using max 16 ests per chain, 38400 per kthread [ 2263.945273][T32751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2264.022795][T32751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2264.107225][T17520] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2264.118125][T17520] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2264.128983][T17520] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2264.152590][T17520] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2264.161607][T17520] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2264.175312][T17520] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2264.608620][T32755] chnl_net:caif_netlink_parms(): no params data found [ 2264.799866][T32755] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.807190][T32755] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.814932][T32755] bridge_slave_0: entered allmulticast mode [ 2264.822351][T32755] bridge_slave_0: entered promiscuous mode [ 2264.834306][T32755] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.843009][T32755] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.850588][T32755] bridge_slave_1: entered allmulticast mode [ 2264.857595][T32755] bridge_slave_1: entered promiscuous mode [ 2264.894977][T32755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2264.916842][T32755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2264.961343][T32755] team0: Port device team_slave_0 added [ 2264.973084][T32755] team0: Port device team_slave_1 added [ 2265.019831][T32755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.028183][T32755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.060246][T32755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.075068][T32755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2265.083088][T32755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.113629][T32755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2265.173964][T32755] hsr_slave_0: entered promiscuous mode [ 2265.187276][T32755] hsr_slave_1: entered promiscuous mode [ 2265.194895][T32755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2265.215977][T32755] Cannot create hsr debugfs directory [ 2265.417565][T32755] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.528596][T32755] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.675850][T32755] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.802481][T32755] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2266.061129][T32755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2266.079802][T32755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2266.098662][T32755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2266.115290][T32755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2266.275804][ T5238] Bluetooth: hci9: command tx timeout [ 2266.286028][T32755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.341288][T32755] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.356605][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.363832][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.393421][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.400706][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.511624][T32755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2266.655077][T32755] veth0_vlan: entered promiscuous mode [ 2266.723513][T32755] veth1_vlan: entered promiscuous mode [ 2266.789724][T32755] veth0_macvtap: entered promiscuous mode [ 2266.800503][T32755] veth1_macvtap: entered promiscuous mode [ 2266.825446][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.839824][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.857436][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.873133][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.883278][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.893990][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.913412][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.924515][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.934662][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.949898][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.960368][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.971713][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.986192][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.996972][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.007125][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.018226][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.028489][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.049305][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.069255][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.089105][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.102564][T32755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2267.120362][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.144529][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.161517][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.172156][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.182552][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.193830][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.204102][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.216058][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.229533][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.240853][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.254217][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.265040][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.275279][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.286183][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.296656][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.310419][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.322082][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.332887][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.343056][T32755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2267.356510][T32755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.368799][T32755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2267.398463][T32755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.408166][T32755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.417402][T32755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.449447][T32755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.614783][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.630086][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.691337][T27596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.694265][ T305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.717249][ T305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.730946][T27596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.784076][ T305] vlan2: entered promiscuous mode [ 2267.801171][ T305] veth0: entered promiscuous mode [ 2267.830568][ T305] veth0: left promiscuous mode [ 2268.103377][ T29] audit: type=1326 audit(1728307486.121:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=309 comm="syz.0.4557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc37d97dff9 code=0x0 [ 2268.157519][ T312] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4557'. [ 2268.233944][T22117] usb 2-1: USB disconnect, device number 3 [ 2268.252569][T22117] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2268.271209][T22117] cp210x 2-1:0.0: device disconnected [ 2268.339488][T17520] Bluetooth: hci9: command tx timeout [ 2268.805770][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2268.825423][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2268.836069][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2268.845141][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2268.853474][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2268.861714][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2269.418029][ T323] chnl_net:caif_netlink_parms(): no params data found [ 2269.555795][ T329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.740372][ T329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.094964][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 2270.121483][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2270.130314][ T323] bridge_slave_0: entered allmulticast mode [ 2270.151419][ T323] bridge_slave_0: entered promiscuous mode [ 2270.207658][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 2270.245548][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 2270.269520][ T323] bridge_slave_1: entered allmulticast mode [ 2270.298117][ T323] bridge_slave_1: entered promiscuous mode [ 2270.419963][T17520] Bluetooth: hci9: command tx timeout [ 2270.633866][ T323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2270.680928][ T323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2270.898988][ T323] team0: Port device team_slave_0 added [ 2270.919220][T17520] Bluetooth: hci10: command tx timeout [ 2270.966392][ T323] team0: Port device team_slave_1 added [ 2271.096177][ T323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2271.119271][ T323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2271.171960][ T323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2271.185977][ T323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2271.196365][ T323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2271.232280][ T323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2271.366654][ T323] hsr_slave_0: entered promiscuous mode [ 2271.377304][ T323] hsr_slave_1: entered promiscuous mode [ 2271.390685][ T323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2271.402215][ T323] Cannot create hsr debugfs directory [ 2271.466485][ T354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2271.949503][ T323] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.105214][ T323] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.300277][ T323] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.353582][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.362801][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.396322][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.408084][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.421301][ T323] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2272.451264][ T367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.462312][ T367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.478127][ T367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4571'. [ 2272.500217][T17520] Bluetooth: hci9: command tx timeout [ 2272.746153][ T323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2272.779952][ T323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2272.812696][ T323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2272.849454][ T323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2272.877383][ T374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.933463][ T374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.979970][T17520] Bluetooth: hci10: command tx timeout [ 2273.122493][ T323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2273.173925][ T323] 8021q: adding VLAN 0 to HW filter on device team0 [ 2273.188026][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.195428][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2273.224115][ T6798] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.231298][ T6798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.436008][ T323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2273.443110][ T381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.454565][ T381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.533283][ T323] veth0_vlan: entered promiscuous mode [ 2273.572338][ T323] veth1_vlan: entered promiscuous mode [ 2273.642759][ T323] veth0_macvtap: entered promiscuous mode [ 2273.652857][ T323] veth1_macvtap: entered promiscuous mode [ 2273.669868][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.680439][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.690438][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.701200][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.712708][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.724703][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.734883][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.745472][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.755413][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.766023][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.776004][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.787012][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.797007][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.809146][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.819005][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.831061][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.841011][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.851547][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.861780][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.872500][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.882446][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2273.893039][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.904721][ T323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2273.917602][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.928188][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.938138][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.950486][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.961376][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.971950][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2273.981993][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2273.992583][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.002485][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.014597][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.026201][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.036815][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.046786][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.057395][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.067333][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.077864][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.087834][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.098434][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.108668][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.120799][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.132167][ T323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2274.142754][ T323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2274.154359][ T323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2274.224324][ T323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.233274][ T323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.242110][ T323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.250931][ T323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.496645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.519303][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.575148][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.607759][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.059269][T17520] Bluetooth: hci10: command tx timeout [ 2275.139393][T30570] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2275.289198][T30570] usb 2-1: Using ep0 maxpacket: 16 [ 2275.296218][T30570] usb 2-1: descriptor type invalid, skip [ 2275.303162][T30570] usb 2-1: config 0 has no interfaces? [ 2275.310956][T30570] usb 2-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43 [ 2275.320259][T30570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.328301][T30570] usb 2-1: Product: syz [ 2275.333986][T30570] usb 2-1: Manufacturer: syz [ 2275.338643][T30570] usb 2-1: SerialNumber: syz [ 2275.351429][T30570] usb 2-1: config 0 descriptor?? [ 2275.571762][T22117] usb 2-1: USB disconnect, device number 4 [ 2276.401814][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2276.458941][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.140065][T17520] Bluetooth: hci10: command tx timeout [ 2278.117111][ T6794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.307983][ T6794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.646816][ T6794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.769482][T22117] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2278.818752][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2278.825705][ T425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.885473][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2278.895158][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2278.909466][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2278.910839][ T6794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.969529][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2278.992467][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2279.049171][T22117] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2279.079831][T22117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.091262][ T425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.144642][T22117] usb 2-1: config 0 descriptor?? [ 2279.184870][T22117] cp210x 2-1:0.0: cp210x converter detected [ 2279.398025][ T422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.578207][ T422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.593657][ T6794] bridge_slave_1: left allmulticast mode [ 2279.611802][ T6794] bridge_slave_1: left promiscuous mode [ 2279.617602][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.689829][ T6794] bridge_slave_0: left allmulticast mode [ 2279.712518][ T6794] bridge_slave_0: left promiscuous mode [ 2279.738608][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.896126][T22117] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2281.059215][ T5238] Bluetooth: hci8: command tx timeout [ 2281.422894][ T6794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.449244][ T6794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.473332][ T6794] bond0 (unregistering): Released all slaves [ 2281.514899][ T428] chnl_net:caif_netlink_parms(): no params data found [ 2282.372188][ T462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2282.429690][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 2282.467599][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.489567][ T428] bridge_slave_0: entered allmulticast mode [ 2282.519622][ T462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.530074][ T428] bridge_slave_0: entered promiscuous mode [ 2282.761395][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 2282.790455][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.797756][ T428] bridge_slave_1: entered allmulticast mode [ 2282.847657][ T428] bridge_slave_1: entered promiscuous mode [ 2283.113531][ T428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.140955][ T5238] Bluetooth: hci8: command tx timeout [ 2283.165674][ T6794] hsr_slave_0: left promiscuous mode [ 2283.221798][ T6794] hsr_slave_1: left promiscuous mode [ 2283.256025][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2283.280871][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2283.352487][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2283.364834][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2283.417632][ T6794] veth1_vlan: left promiscuous mode [ 2283.436553][ T6794] @ÿ: left promiscuous mode [ 2283.551270][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.557834][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.901031][T30570] usb 2-1: USB disconnect, device number 5 [ 2284.912426][T30570] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2284.941381][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 2284.953919][T30570] cp210x 2-1:0.0: device disconnected [ 2285.150499][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 2285.229641][ T5238] Bluetooth: hci8: command tx timeout [ 2287.300294][ T5238] Bluetooth: hci8: command tx timeout [ 2287.498922][ T428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2287.510768][ T471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 2287.711047][ T428] team0: Port device team_slave_0 added [ 2287.721716][ T428] team0: Port device team_slave_1 added [ 2287.790266][ T428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2287.797282][ T428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.840127][ T428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2287.871789][ T428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2287.878889][ T428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2287.912866][ T428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2288.029658][ T428] hsr_slave_0: entered promiscuous mode [ 2288.045184][ T428] hsr_slave_1: entered promiscuous mode [ 2288.060632][ T428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2288.068271][ T428] Cannot create hsr debugfs directory [ 2288.200130][ T6794] IPVS: stop unused estimator thread 0... [ 2288.422872][ T6794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2288.602730][ T6794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2288.807983][ T510] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 2288.971004][ T510] team0: Port device wlan1 added [ 2289.005836][T17520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2289.021972][T17520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2289.031175][T17520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2289.039347][T17520] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2289.056042][T17520] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2289.072597][T17520] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2289.130296][ T517] ebt_limit: overflow, try lower: 570423552/2483027968 [ 2289.218055][ T6794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2289.445047][ T6794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.006168][ T6794] bridge_slave_1: left allmulticast mode [ 2290.015922][ T6794] bridge_slave_1: left promiscuous mode [ 2290.029409][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.088390][ T6794] bridge_slave_0: left allmulticast mode [ 2290.095244][ T6794] bridge_slave_0: left promiscuous mode [ 2290.112297][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.139424][ T5238] Bluetooth: hci5: command tx timeout [ 2291.452727][ T6794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2291.489735][ T6794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2291.504917][ T6794] bond0 (unregistering): Released all slaves [ 2291.559819][ T428] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2291.612633][ T519] chnl_net:caif_netlink_parms(): no params data found [ 2291.679235][ T428] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2291.712147][ T428] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2291.907156][ T428] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2292.186623][ T594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4615'. [ 2292.476054][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.546667][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.596065][ T519] bridge_slave_0: entered allmulticast mode [ 2292.633997][ T519] bridge_slave_0: entered promiscuous mode [ 2292.876580][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2292.895234][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.903765][ T519] bridge_slave_1: entered allmulticast mode [ 2292.914017][ T519] bridge_slave_1: entered promiscuous mode [ 2292.992062][ T6794] hsr_slave_0: left promiscuous mode [ 2292.998945][ T6794] hsr_slave_1: left promiscuous mode [ 2293.005530][T32027] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2293.020435][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2293.037258][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2293.048609][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2293.059460][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2293.145404][ T6794] veth1_macvtap: left promiscuous mode [ 2293.162353][ T6794] veth0_macvtap: left promiscuous mode [ 2293.168027][ T6794] veth1_vlan: left promiscuous mode [ 2293.173918][T32027] usb 2-1: Using ep0 maxpacket: 16 [ 2293.193338][T32027] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2293.193736][ T613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2293.209223][T32027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.219754][ T5238] Bluetooth: hci5: command tx timeout [ 2293.227857][ T6794] veth0_vlan: left promiscuous mode [ 2293.234014][T32027] usb 2-1: Product: syz [ 2293.238321][T32027] usb 2-1: Manufacturer: syz [ 2293.243631][T32027] usb 2-1: SerialNumber: syz [ 2293.251440][T32027] usb 2-1: config 0 descriptor?? [ 2293.289866][ T613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2293.507012][T32027] speedtch 2-1:0.0: speedtch_bind: wrong device class 68 [ 2293.519325][T32027] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2294.475098][ T6794] team0 (unregistering): Port device team_slave_1 removed [ 2294.566486][ T6794] team0 (unregistering): Port device team_slave_0 removed [ 2295.319633][T17520] Bluetooth: hci5: command tx timeout [ 2295.508690][ T519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2295.588865][ T519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2295.764989][ T519] team0: Port device team_slave_0 added [ 2295.811035][ T519] team0: Port device team_slave_1 added [ 2295.859611][T17520] Bluetooth: hci1: command 0x0406 tx timeout [ 2296.020384][ T519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2296.068934][ T519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2296.131320][ T519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2296.156751][ T519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2296.172415][ T519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2296.218638][ T519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2296.506609][ T519] hsr_slave_0: entered promiscuous mode [ 2296.517765][ T519] hsr_slave_1: entered promiscuous mode [ 2296.524710][ T519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2296.533005][ T519] Cannot create hsr debugfs directory [ 2296.698324][ T428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2296.835855][ T428] 8021q: adding VLAN 0 to HW filter on device team0 [ 2296.864432][T21945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.871668][T21945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2296.905877][T21945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.913104][T21945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2297.036314][ T9] usb 2-1: USB disconnect, device number 6 [ 2297.338785][ T657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2297.379273][ T5238] Bluetooth: hci5: command tx timeout [ 2297.397981][ T657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.478125][ T657] SET target dimension over the limit! [ 2297.603400][ T428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2297.702490][ T428] veth0_vlan: entered promiscuous mode [ 2297.742944][ T428] veth1_vlan: entered promiscuous mode [ 2297.851676][ T519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2297.867644][ T428] veth0_macvtap: entered promiscuous mode [ 2297.897696][ T519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2297.926236][ T428] veth1_macvtap: entered promiscuous mode [ 2297.935049][ T519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2297.954783][ T519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2297.992389][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.005011][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.026042][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.058360][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.081314][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.148826][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.189374][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.209108][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.229117][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.263544][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.288493][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.300820][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.311853][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.322637][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.333046][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.354135][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.364452][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.376280][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.388794][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2298.407093][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.432831][ T428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2298.472093][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.487124][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.497303][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.499699][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2298.509862][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.527486][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.538531][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.549291][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.560745][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.570975][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.582817][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.596341][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.607164][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.617091][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.627882][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.638390][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.649389][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.660233][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.669392][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2298.670857][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.685334][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 2298.686231][ T428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2298.708663][ T428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2298.718959][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 2298.734257][ T428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2298.737468][ T9] usb 2-1: Product: syz [ 2298.747592][ T9] usb 2-1: Manufacturer: syz [ 2298.754923][ T428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.763713][ T9] usb 2-1: SerialNumber: syz [ 2298.766245][ T9] usb 2-1: config 0 descriptor?? [ 2298.783794][ T428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.798805][ T9] usbtest 2-1:0.0: FX2 device [ 2298.805819][ T9] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 2298.829577][ T428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2298.867269][ T428] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2299.116899][ T679] bond0: entered promiscuous mode [ 2299.125100][ T679] bond_slave_0: entered promiscuous mode [ 2299.131016][ T679] bond_slave_1: entered promiscuous mode [ 2299.137212][ T679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2299.166605][ T679] bond0: left promiscuous mode [ 2299.179439][ T679] bond_slave_0: left promiscuous mode [ 2299.185070][ T679] bond_slave_1: left promiscuous mode [ 2299.215257][ T683] fuse: Bad value for 'group_id' [ 2299.239244][ T683] fuse: Bad value for 'group_id' [ 2299.313408][ T684] lo: entered promiscuous mode [ 2299.323323][T30577] usb 2-1: USB disconnect, device number 7 [ 2299.330216][ T680] lo: left promiscuous mode [ 2299.420092][T21945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2299.427994][T21945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.468371][ T519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2299.551402][ T30] INFO: task kworker/0:5:5279 blocked for more than 143 seconds. [ 2299.576531][ T30] Not tainted 6.12.0-rc2-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2299.617119][ T519] 8021q: adding VLAN 0 to HW filter on device team0 [ 2299.624651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2299.656801][ T30] task:kworker/0:5 state:D stack:18480 pid:5279 tgid:5279 ppid:2 flags:0x00004000 [ 2299.701310][T21945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2299.739251][ T30] Workqueue: usb_hub_wq hub_event [ 2299.744406][ T30] Call Trace: [ 2299.747753][ T30] [ 2299.749544][T21945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.786195][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 2299.793416][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2299.819419][ T30] __schedule+0x1895/0x4b30 [ 2299.824065][ T30] ? __pfx___schedule+0x10/0x10 [ 2299.828978][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2299.890813][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.904074][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2299.911719][ T30] ? __pfx_lock_release+0x10/0x10 [ 2299.918861][ T30] ? kick_pool+0x1bd/0x620 [ 2299.929954][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2299.935227][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2299.940787][ T30] ? schedule+0x90/0x320 [ 2299.945097][ T30] schedule+0x14b/0x320 [ 2299.951505][ T30] schedule_preempt_disabled+0x13/0x30 [ 2299.957047][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 2299.962900][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 2299.968872][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 2299.975240][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2299.982423][ T30] ? kobject_put+0x272/0x480 [ 2299.987086][ T30] down_write+0x1d7/0x220 [ 2299.991615][ T30] ? __pfx_down_write+0x10/0x10 [ 2299.996560][ T30] ? free_large_kmalloc+0x105/0x1c0 [ 2300.001950][ T30] ? as102_usb_disconnect+0x50/0x120 [ 2300.007279][ T30] usb_deregister_dev+0x88/0x210 [ 2300.012305][ T30] as102_usb_disconnect+0x79/0x120 [ 2300.017461][ T30] usb_unbind_interface+0x25e/0x940 [ 2300.027970][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 2300.033877][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2300.039802][ T30] device_release_driver_internal+0x503/0x7c0 [ 2300.045937][ T30] bus_remove_device+0x34f/0x420 [ 2300.051026][ T30] device_del+0x57a/0x9b0 [ 2300.055436][ T30] ? __pfx_device_del+0x10/0x10 [ 2300.060411][ T30] ? usb_disconnect+0x103/0x950 [ 2300.065303][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2300.073238][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2300.078318][ T30] usb_disable_device+0x3bf/0x850 [ 2300.083494][ T30] usb_disconnect+0x340/0x950 [ 2300.088231][ T30] hub_event+0x1ebc/0x5150 [ 2300.092946][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 2300.098677][ T30] ? __pfx_hub_event+0x10/0x10 [ 2300.105504][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2300.110684][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2300.116725][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2300.124422][ T30] ? process_scheduled_works+0x976/0x1850 [ 2300.131317][ T30] process_scheduled_works+0xa63/0x1850 [ 2300.136954][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2300.143074][ T30] ? assign_work+0x364/0x3d0 [ 2300.147725][ T30] worker_thread+0x870/0xd30 [ 2300.152490][ T30] ? __kthread_parkme+0x169/0x1d0 [ 2300.157577][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2300.162821][ T30] kthread+0x2f0/0x390 [ 2300.166937][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2300.172178][ T30] ? __pfx_kthread+0x10/0x10 [ 2300.176803][ T30] ret_from_fork+0x4b/0x80 [ 2300.182675][ T30] ? __pfx_kthread+0x10/0x10 [ 2300.187342][ T30] ret_from_fork_asm+0x1a/0x30 [ 2300.192487][ T30] [ 2300.195647][ T30] INFO: task syz.3.4293:31278 blocked for more than 144 seconds. [ 2300.209361][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 2300.216003][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2300.225803][ T30] task:syz.3.4293 state:D stack:25024 pid:31278 tgid:31278 ppid:29878 flags:0x00004004 [ 2300.237375][ T30] Call Trace: [ 2300.240960][ T30] [ 2300.249189][ T30] __schedule+0x1895/0x4b30 [ 2300.253854][ T30] ? __pfx___schedule+0x10/0x10 [ 2300.258774][ T30] ? __pfx_lock_release+0x10/0x10 [ 2300.264231][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2300.270422][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2300.276806][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2300.282875][ T30] ? schedule+0x90/0x320 [ 2300.287169][ T30] schedule+0x14b/0x320 [ 2300.291540][ T30] rpm_resume+0x504/0x1670 [ 2300.296023][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2300.301200][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 2300.306094][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2300.312280][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2300.317688][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2300.324561][ T30] rpm_resume+0x8fe/0x1670 [ 2300.331612][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 2300.336541][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 2300.342273][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2300.348212][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2300.354621][ T30] __pm_runtime_resume+0x120/0x180 [ 2300.369169][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 2300.374615][ T30] usb_autopm_get_interface+0x22/0xf0 [ 2300.399242][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 2300.404722][ T30] wdm_manage_power+0x1c/0xa0 [ 2300.459243][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 2300.464735][ T30] wdm_release+0x20f/0x460 [ 2300.482431][ T30] ? __pfx_wdm_release+0x10/0x10 [ 2300.487480][ T30] __fput+0x23f/0x880 [ 2300.538451][ T30] task_work_run+0x24f/0x310 [ 2300.559094][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2300.564299][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2300.599108][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 2300.604840][ T30] do_syscall_64+0x100/0x230 [ 2300.619098][ T30] ? clear_bhb_loop+0x35/0x90 [ 2300.623850][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.630915][ T30] RIP: 0033:0x7f953a37dff9 [ 2300.638201][ T30] RSP: 002b:00007f953a65fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2300.646773][ T30] RAX: 0000000000000000 RBX: 00007f953a537a80 RCX: 00007f953a37dff9 [ 2300.656495][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2300.679086][ T30] RBP: 00007f953a537a80 R08: 0000000000000006 R09: 00007f953a65fe7f [ 2300.687140][ T30] R10: 00000000003ffbb0 R11: 0000000000000246 R12: 000000000020be18 [ 2300.695902][ T30] R13: 00007f953a65fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 2300.709226][ T30] [ 2300.732892][ T30] INFO: task syz.1.4303:31314 blocked for more than 144 seconds. [ 2300.741567][ T30] Not tainted 6.12.0-rc2-syzkaller #0 [ 2300.747498][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2300.756862][ T30] task:syz.1.4303 state:D stack:25488 pid:31314 tgid:31312 ppid:30873 flags:0x00000004 [ 2300.767282][ T30] Call Trace: [ 2300.770715][ T30] [ 2300.773718][ T30] __schedule+0x1895/0x4b30 [ 2300.778301][ T30] ? __pfx___schedule+0x10/0x10 [ 2300.783455][ T30] ? __pfx_lock_release+0x10/0x10 [ 2300.788533][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2300.794234][ T30] ? schedule+0x90/0x320 [ 2300.798533][ T30] schedule+0x14b/0x320 [ 2300.803097][ T30] schedule_preempt_disabled+0x13/0x30 [ 2300.808614][ T30] __mutex_lock+0x6a7/0xd70 [ 2300.813427][ T30] ? __mutex_lock+0x52a/0xd70 [ 2300.818158][ T30] ? wdm_open+0x56/0x550 [ 2300.823102][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2300.828183][ T30] ? __pfx_down_read+0x10/0x10 [ 2300.833427][ T30] ? chrdev_open+0xfb/0x600 [ 2300.839478][ T30] ? __pfx_lock_release+0x10/0x10 [ 2300.844576][ T30] wdm_open+0x56/0x550 [ 2300.848701][ T30] ? __pfx_wdm_open+0x10/0x10 [ 2300.853685][ T30] usb_open+0x14b/0x1d0 [ 2300.857892][ T30] chrdev_open+0x521/0x600 [ 2300.862438][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 2300.868041][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2300.873138][ T30] ? security_file_open+0x513/0x990 [ 2300.878379][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 2300.883456][ T30] do_dentry_open+0x978/0x1460 [ 2300.888287][ T30] vfs_open+0x3e/0x330 [ 2300.892555][ T30] path_openat+0x2c84/0x3590 [ 2300.897209][ T30] ? __lock_acquire+0x1384/0x2050 [ 2300.902471][ T30] ? __pfx_path_openat+0x10/0x10 [ 2300.907480][ T30] do_filp_open+0x235/0x490 [ 2300.912178][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 2300.917298][ T30] ? _raw_spin_unlock+0x28/0x50 [ 2300.922320][ T30] ? alloc_fd+0x5a1/0x640 [ 2300.926703][ T30] do_sys_openat2+0x13e/0x1d0 [ 2300.931511][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2300.936781][ T30] ? __fget_files+0x3f3/0x470 [ 2300.942243][ T30] __x64_sys_openat+0x247/0x2a0 [ 2300.947154][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2300.953263][ T30] ? do_syscall_64+0x100/0x230 [ 2300.958078][ T30] ? do_syscall_64+0xb6/0x230 [ 2300.962866][ T30] do_syscall_64+0xf3/0x230 [ 2300.967435][ T30] ? clear_bhb_loop+0x35/0x90 [ 2300.972244][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.978186][ T30] RIP: 0033:0x7f508877c990 [ 2300.982994][ T30] RSP: 002b:00007f50881ddb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2300.991604][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f508877c990 [ 2300.999714][ T30] RDX: 0000000000000002 RSI: 00007f50881ddc10 RDI: 00000000ffffff9c [ 2301.007725][ T30] RBP: 00007f50881ddc10 R08: 0000000000000000 R09: 00007f50881dd987 [ 2301.015868][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2301.023958][ T30] R13: 0000000000000000 R14: 00007f5088936058 R15: 00007f5088a5fa28 [ 2301.032059][ T30] [ 2301.035185][ T30] [ 2301.035185][ T30] Showing all locks held in the system: [ 2301.043891][ T30] 1 lock held by khungtaskd/30: [ 2301.048771][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2301.059611][ T30] 2 locks held by getty/4982: [ 2301.066665][ T30] #0: ffff88802e7b40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2301.076903][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 2301.087429][ T30] 3 locks held by kworker/0:3/5269: [ 2301.092905][ T30] #0: ffff8881412c9148 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2301.103908][ T30] #1: ffffc90003f57d00 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2301.116420][ T30] #2: ffff888028291510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x1c6/0x14d0 [ 2301.127201][ T30] 6 locks held by kworker/0:5/5279: [ 2301.132663][ T30] #0: ffff8881412e0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2301.144529][ T30] #1: ffffc90004007d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2301.156700][ T30] #2: ffff88802811b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 2301.166690][ T30] #3: ffff888030512190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 2301.176957][ T30] #4: ffff88806989a160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 2301.187886][ T30] #5: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_deregister_dev+0x88/0x210 [ 2301.197857][ T30] 6 locks held by kworker/0:6/15099: [ 2301.203449][ T30] #0: ffff8881412e0548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2301.215083][ T30] #1: ffffc90003ac7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2301.227255][ T30] #2: ffff888144f16190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 2301.236958][ T30] #3: ffff88806279e190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 2301.246665][ T30] #4: ffff88805863a160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 2301.256825][ T30] #5: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 2301.267333][ T30] 3 locks held by kworker/u8:2/21945: [ 2301.272990][ T30] 3 locks held by kworker/1:15/30570: [ 2301.278389][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2301.289713][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 2301.301893][ T30] #2: ffff8880620d5240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 2301.312162][ T30] 3 locks held by kworker/1:16/30577: [ 2301.317565][ T30] 1 lock held by syz.3.4293/31278: [ 2301.322835][ T30] #0: ffffffff8f633668 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4f/0x460 [ 2301.331741][ T30] 2 locks held by syz.1.4303/31314: [ 2301.336973][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 2301.345954][ T30] #1: ffffffff8f633668 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 2301.355268][ T30] 4 locks held by udevd/31690: [ 2301.360730][ T30] #0: ffff88806a0232f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 2301.369706][ T30] #1: ffff88805f70b888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 2301.379494][ T30] #2: ffff888031a000f8 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 2301.389214][ T30] #3: ffff88806279e190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 2301.398610][ T30] 1 lock held by syz.3.4405/31946: [ 2301.403833][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 2301.412880][ T30] 3 locks held by kworker/0:2/32027: [ 2301.418205][ T30] 1 lock held by syz.0.4528/32664: [ 2301.423401][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 2301.432382][ T30] 1 lock held by syz.1.4540/32707: [ 2301.437542][ T30] #0: ffff888144f16190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x770 [ 2301.446789][ T30] 3 locks held by syz-executor/428: [ 2301.452102][ T30] #0: ffff888067a88d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2301.464455][ T30] #1: ffff888067a88078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2301.474558][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2301.484790][ T30] 3 locks held by syz.1.4627/683: [ 2301.489915][ T30] #0: ffff888048ba4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2301.500029][ T30] #1: ffff888048ba4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2301.509924][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2301.520999][ T30] 3 locks held by syz.2.4631/689: [ 2301.526052][ T30] #0: ffff88807b44cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2301.536212][ T30] #1: ffff88807b44c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2301.546303][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2301.557797][ T30] [ 2301.560254][ T30] ============================================= [ 2301.560254][ T30] [ 2301.568694][ T30] NMI backtrace for cpu 0 [ 2301.573037][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 2301.581811][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2301.591875][ T30] Call Trace: [ 2301.595164][ T30] [ 2301.598105][ T30] dump_stack_lvl+0x241/0x360 [ 2301.602799][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2301.608011][ T30] ? __pfx__printk+0x10/0x10 [ 2301.612626][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2301.617604][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2301.623077][ T30] ? _printk+0xd5/0x120 [ 2301.627256][ T30] ? __pfx__printk+0x10/0x10 [ 2301.631889][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2301.636755][ T30] ? __pfx__printk+0x10/0x10 [ 2301.641365][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2301.646408][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2301.652409][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2301.658423][ T30] watchdog+0xff4/0x1040 [ 2301.662692][ T30] ? watchdog+0x1ea/0x1040 [ 2301.667146][ T30] ? __pfx_watchdog+0x10/0x10 [ 2301.671840][ T30] kthread+0x2f0/0x390 [ 2301.675923][ T30] ? __pfx_watchdog+0x10/0x10 [ 2301.680619][ T30] ? __pfx_kthread+0x10/0x10 [ 2301.685219][ T30] ret_from_fork+0x4b/0x80 [ 2301.689655][ T30] ? __pfx_kthread+0x10/0x10 [ 2301.694251][ T30] ret_from_fork_asm+0x1a/0x30 [ 2301.699049][ T30] [ 2301.703120][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2301.708903][ C1] NMI backtrace for cpu 1 [ 2301.708917][ C1] CPU: 1 UID: 0 PID: 30577 Comm: kworker/1:16 Not tainted 6.12.0-rc2-syzkaller #0 [ 2301.708940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2301.708952][ C1] Workqueue: events drain_vmap_area_work [ 2301.708979][ C1] RIP: 0010:page_ext_put+0x21/0xc0 [ 2301.709004][ C1] Code: 90 90 90 90 90 90 90 90 90 66 0f 1f 00 53 48 89 fb e8 53 7e 89 ff 48 85 db 0f 84 93 00 00 00 e8 15 16 ba 09 89 c3 31 ff 89 c6 7a 82 89 ff 85 db 74 10 e8 f1 6c 6f ff 84 c0 74 0e e8 28 7e 89 [ 2301.709027][ C1] RSP: 0018:ffffc90003e27730 EFLAGS: 00000246 [ 2301.709045][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff8880615c0000 [ 2301.709061][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2301.709073][ C1] RBP: 0000000000007771 R08: ffffffff82092f56 R09: 1ffff11003c9bbfc [ 2301.709088][ C1] R10: dffffc0000000000 R11: ffffed1003c9bbfd R12: 0000000000000001 [ 2301.709102][ C1] R13: dffffc0000000000 R14: ffff88801e4de024 R15: ffff88801e4de030 [ 2301.709117][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2301.709134][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2301.709148][ C1] CR2: 00007f0867a56440 CR3: 000000000e734000 CR4: 00000000003526f0 [ 2301.709166][ C1] DR0: 0000000000000000 DR1: 000000000000002b DR2: 0000000000000000 [ 2301.709178][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2301.709191][ C1] Call Trace: [ 2301.709198][ C1] [ 2301.709206][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2301.709230][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2301.709260][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2301.709283][ C1] ? nmi_handle+0x2a/0x5a0 [ 2301.709311][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2301.709337][ C1] ? nmi_handle+0x14f/0x5a0 [ 2301.709356][ C1] ? nmi_handle+0x2a/0x5a0 [ 2301.709377][ C1] ? page_ext_put+0x21/0xc0 [ 2301.709398][ C1] ? default_do_nmi+0x63/0x160 [ 2301.709422][ C1] ? exc_nmi+0x123/0x1f0 [ 2301.709444][ C1] ? end_repeat_nmi+0xf/0x53 [ 2301.709465][ C1] ? __reset_page_owner+0x126/0x430 [ 2301.709487][ C1] ? page_ext_put+0x21/0xc0 [ 2301.709508][ C1] ? page_ext_put+0x21/0xc0 [ 2301.709532][ C1] ? page_ext_put+0x21/0xc0 [ 2301.709553][ C1] [ 2301.709560][ C1] [ 2301.709567][ C1] __reset_page_owner+0x2de/0x430 [ 2301.709591][ C1] free_unref_page+0xcfb/0xf20 [ 2301.709625][ C1] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 2301.709645][ C1] __apply_to_page_range+0x806/0xde0 [ 2301.709676][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 2301.709699][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 2301.709726][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2301.709747][ C1] ? on_each_cpu_cond_mask+0x59/0x80 [ 2301.709765][ C1] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 2301.709795][ C1] kasan_release_vmalloc+0x9a/0xb0 [ 2301.709813][ C1] purge_vmap_node+0x417/0x810 [ 2301.709842][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 2301.709864][ C1] ? on_each_cpu_cond_mask+0x74/0x80 [ 2301.709887][ C1] __purge_vmap_area_lazy+0x708/0xae0 [ 2301.709912][ C1] ? process_scheduled_works+0x976/0x1850 [ 2301.709939][ C1] drain_vmap_area_work+0x27/0x40 [ 2301.709960][ C1] process_scheduled_works+0xa63/0x1850 [ 2301.709999][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2301.710030][ C1] ? assign_work+0x364/0x3d0 [ 2301.710058][ C1] worker_thread+0x870/0xd30 [ 2301.710088][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2301.710118][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2301.710147][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2301.710173][ C1] kthread+0x2f0/0x390 [ 2301.710192][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2301.710218][ C1] ? __pfx_kthread+0x10/0x10 [ 2301.710237][ C1] ret_from_fork+0x4b/0x80 [ 2301.710264][ C1] ? __pfx_kthread+0x10/0x10 [ 2301.710291][ C1] ret_from_fork_asm+0x1a/0x30 [ 2301.710325][ C1] [ 2301.710909][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2301.710924][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller #0 [ 2301.710952][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2301.710966][ T30] Call Trace: [ 2301.710977][ T30] [ 2301.710987][ T30] dump_stack_lvl+0x241/0x360 [ 2301.711018][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2301.711042][ T30] ? __pfx__printk+0x10/0x10 [ 2301.711075][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2301.711137][ T30] ? vscnprintf+0x5d/0x90 [ 2301.711168][ T30] panic+0x349/0x880 [ 2301.711206][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2301.711239][ T30] ? __pfx_panic+0x10/0x10 [ 2301.711272][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2301.711301][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2301.711337][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2301.711363][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2301.711393][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2301.711427][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2301.711461][ T30] watchdog+0x1033/0x1040 [ 2301.711495][ T30] ? watchdog+0x1ea/0x1040 [ 2301.711542][ T30] ? __pfx_watchdog+0x10/0x10 [ 2301.711575][ T30] kthread+0x2f0/0x390 [ 2301.711611][ T30] ? __pfx_watchdog+0x10/0x10 [ 2301.711642][ T30] ? __pfx_kthread+0x10/0x10 [ 2301.711685][ T30] ret_from_fork+0x4b/0x80 [ 2301.711720][ T30] ? __pfx_kthread+0x10/0x10 [ 2301.711757][ T30] ret_from_fork_asm+0x1a/0x30 [ 2301.711805][ T30] [ 2302.234164][ T30] Kernel Offset: disabled [ 2302.238499][ T30] Rebooting in 86400 seconds..