last executing test programs: 16.187906608s ago: executing program 2 (id=4104): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r2, 0x0, 0x0) 15.909531204s ago: executing program 2 (id=4107): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000003400000000008001e0040000000", 0x24) 15.779209109s ago: executing program 2 (id=4109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000020904000012ffff0002052406000005240000000d24022e000000000008000000000800"/77], 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000140), 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000200)='X', 0xfffffffffffffe7b, 0xfffffffffffffffa) r11 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r10, r11, r11}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) socket$unix(0x1, 0x2, 0x0) 15.152297921s ago: executing program 4 (id=4113): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) sync() 14.907953165s ago: executing program 4 (id=4114): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) 14.571576123s ago: executing program 4 (id=4115): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 14.175998103s ago: executing program 4 (id=4116): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 13.932495304s ago: executing program 4 (id=4117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clock_adjtime(0x0, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000480)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.649783955s ago: executing program 4 (id=4118): socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xc0000004, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x89, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_uring_setup(0x1b94, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0, 0x38c}) 12.489634319s ago: executing program 2 (id=4127): socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) gettid() sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffed08d2e19a5c24a93497d82c0c7385ab2b292684bdcc895cde6a2fd251af6056ae618e6249d81ad4d0529e852eb69f1a48d2f2021981d964d5e260677f47278d7221016f636f1c41096b873d5f8d9902a46fe0e8ee9516ef17d91841e6c70304ecf3ae73e8a7d4b8a8530dafc01ff67988f3946f31bbd4354640e7e2bf93b2"], 0x28) unshare(0x20000400) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0xc, 0x6, 0x5}, 0x14}}, 0x0) recvmsg(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3c) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x7a, &(0x7f0000000d80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "de5c4f", 0x44, 0x2f, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x281, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x80, 0x40, 0x0, 0x7}}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x42000000) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$tipc(r5, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) 10.238057351s ago: executing program 1 (id=4135): r0 = syz_open_dev$I2C(&(0x7f0000000440), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x701, 0x0) 10.026807453s ago: executing program 1 (id=4136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000020904000012ffff0002052406000005240000000d24022e000000000008000000000800"/77], 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000140), 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000200)='X', 0xfffffffffffffe7b, 0xfffffffffffffffa) r11 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r10, r11, r11}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) socket$unix(0x1, 0x2, 0x0) 6.946161465s ago: executing program 1 (id=4143): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000003400000000008001e0040000000", 0x24) 6.611482993s ago: executing program 1 (id=4145): r0 = syz_open_dev$I2C(&(0x7f0000000440), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x701, 0x0) 6.412132527s ago: executing program 1 (id=4147): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@id, 0x10) 6.131718965s ago: executing program 1 (id=4149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10480020}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048009}, 0x8000) socket$inet(0x2, 0xa, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@union={0xb, 0x6, 0x0, 0x5, 0x1, 0xfffffff8, [{0x7, 0x2, 0x8}, {0xa, 0x5, 0x9}, {0x1, 0x3, 0x5}, {0xd, 0x2, 0x1}, {0x8, 0x1, 0x7}, {0x7, 0x2, 0x4937}]}, @const={0xc, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000200)=""/76, 0x7c, 0x4c, 0x1}, 0x20) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$int_out(r3, 0x5460, &(0x7f00000002c0)) r4 = openat$dsp(0xffffff9c, &(0x7f0000000300), 0x301200, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000340)) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000003c0)={0x0, 0x9, 0x800, &(0x7f0000000380)=0x3}) r5 = openat$uinput(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)="ea930d4f032ffc9d9a64e1994a22b9334e1a6f29f7f209627e29868e4b05e258e88d4868a92dc789568af8493c7dd501e2d974958870d359b9124c5258c0eb6a47ae2f7f55227495555497da3781e61e7b4c89aba2f67f02494b55f3da68e553bb2fb6ce703866adbb2339698e6c4c96b25a105b8b9a9421a85e1170285e6e28fed80afb553b2be237a73eac6f74ad7958443df5fe0f499a36d7a50749e430980df3369aa06fdc093583c98c19f65bc56d11e3889c226eafb5f79874ea3960ce883bab7bc1671f4e15fa9f479f1c38893fa4905f1f3912502c591b91b1a1", 0xde}, {&(0x7f00000005c0)="48c77c66dd52f89d8be7eced12d1bf89dfcb66d60bbf75db88ff5b1e8ceb872c8133be6f813b5e6dc5c0d8dec428783d82c5c1ef5013098e2bc3b81bad8e7e47223b31c3d2ef46cc7c738f2e22230ef763bf80e30beb2c8f02fc46bfab9b9b593356af81f28af429b289989aca627fd3dab1bdbdcef62a909e7c7889b835c2719a509c26419dadb01e333d10a8512990d026e8c3f208b05609fbc336e25ee57b7e18b17c76ce7635fe234c8ecb6b0c496a7d562db72ade69245b44ac67371bd1", 0xc0}, {&(0x7f0000000680)="142fdc2b3a96e8d71322aa89266fb2f096a6a2351063a0efe1b55c8cda4fc151200f95f9ffafb388e93714ff5091235dadcd5847385c4de79cb011ba2a0eea904a2c59e1e0f77e5acfaafbacbc35e37549316cbf90041f15fa5b9af719ebc81e46c7672678d877f6c0ae60f0cf0c1ab296c507fb448b9c449369d1a38ef08397fd4cfa1201a07c3723e2cd8fbb6d1315ee4a12625cf5f3195fb46de5cfc4671534406bf518918edf7954692595555d59b1a871ea88f32061d7e0a94c13e12ab5edba6b908e7137c79b42ec83dce1c3488f30a41bd636ad7f42f2013ab6d938cf168a7c5e3b4f5238410be341beef14", 0xef}], 0x4, &(0x7f00000007c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_retopts={{0xac, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x9f, [@broadcast]}, @rr={0x7, 0xf, 0x3c, [@empty, @local, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x54, 0xe3, 0x3, 0x8, [{@multicast2}, {@broadcast, 0x1}, {@private=0xa010101, 0xffffffff}, {@local, 0x7fffffff}, {@rand_addr=0x7fff, 0x1}, {@loopback, 0x7c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x91}, {@broadcast, 0x73}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xde, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @loopback, @broadcast, @local, @remote]}, @timestamp={0x44, 0x10, 0x12, 0x0, 0x4, [0x101, 0xffffffff, 0x6]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10000}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}, @ip_ttl={{0x10, 0x0, 0x2, 0x27}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}], 0x12c}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x138, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x138}}, 0x40) syz_emit_vhci(&(0x7f0000000b40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0x1f, 0xe}, {0x8000, 0x6, 0x20, 0x3, [0xd1, 0x2, 0x8]}}}}, 0x1b) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x40) preadv2(r3, &(0x7f0000000c80), 0x0, 0x2, 0x8000, 0x5) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0x0) r8 = openat$nci(0xffffff9c, &(0x7f0000000cc0), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, r8, 0xa989a000) r9 = openat$vsock(0xffffff9c, &(0x7f0000000d00), 0x200000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000d40)={0x3, 0x0, 0x4, 0x4, 0x7, [{0x2, 0x9, 0x4, '\x00', 0x840}, {0x5, 0x6, 0x80, '\x00', 0x408}, {0x8000000000000000, 0x3ff, 0x2, '\x00', 0x2}, {0x6ca, 0x7, 0x5}, {0x4, 0x4, 0x149, '\x00', 0x1080}, {0x0, 0x9, 0x9, '\x00', 0x4}, {0x7fffffffffffffff, 0x5, 0x6, '\x00', 0x1800}]}) openat(0xffffffffffffffff, &(0x7f0000000f00)='\x00', 0x4081, 0x182) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d1}, 0x8000) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000010c0), &(0x7f0000001100)=0x4) 6.085289122s ago: executing program 2 (id=4151): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "782667444342ab6a920305befca042fa85fad3fdd9e9be33588b7076ca3f4739b7f75e09a49a7eb085fec910b91294d73c874a1994e42b0c720f3305176866773171f96aaf114a6a207705115b1d11d8371b1c436cd5c37239a3562a0267ec3e64177b5c2831017c3fbb3ff51086f8898ef00e3cf54ed4eda36eca69f6b466fee94a24b33576cfa9b08ab956012019164c78a10b6cd4936ce2f037fc4d3f39890d04206effb2cca59b10546d2d3086adcf11b0f662ec455e3973a9810d53b72751230b07c0931227fbeff2f7d00c0d566eadda0cbd05113c7643fc3b04140a447fd947c1e81bd600c1b52fa0f7e580d1ad5be61fe80bbc37014667e873ba7a37", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) 5.860718107s ago: executing program 2 (id=4152): r0 = gettid() fchdir(0xffffffffffffffff) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x4}, {0xf, 0x4}]}]}, {0x0, [0x0]}}, 0x0, 0x37}, 0x20) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822f01) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r1, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.320280864s ago: executing program 0 (id=4162): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001e00)=""/4108, 0x100c) sendmsg$alg(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001140)="b5d5ec868892f9903440e8", 0xb}, {&(0x7f0000000180)="5995d023125d439f0811a15d9f56e6ee6a0976f98e57e90c8659d8459a175fdb7fe6773c9aefb0085ea08a71204cf4ace7ae479e1b9b9024ba70e42742d6924231283f8827297cfb735985faa947b6390f1aa2665251c9768504da188fa1995453e071c58e0f614fa3d6a68bd88dd3e8dbaad4b9ecc056568c359f5c732c10697f9e6ba1f25852476ef7be4679e40c7285148d4dd9cb3a3350c8d21c9889629a326171b78a75b4cdd232347af38b83d61718bed300b206ad47cc33bd9cfc3d4815ce89c10fbc97120275d5d6b1df00ca412f9fc7dc8f10cbd923d2982499ffbfa1d22edd5e5384fdd0d80426e5297326ca87ac50ed", 0xf5}, {&(0x7f0000000340)="74cc7977cd4995d532618c22d784a5eaf2496693cb9dd308cf6318309772486f", 0x20}], 0x3}, 0x0) 3.322534378s ago: executing program 0 (id=4163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x10, 0x8, 0x3, 0x20, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, {[@noop, @timestamp_prespec={0x44, 0x14, 0x73, 0x3, 0x4, [{@multicast1, 0x3f}, {@empty}]}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) ftruncate(r1, 0x8979) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000000600)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={0x0, "2a7e392903235abcbdfe036f45c5b651"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80), 0x0, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1}, 0xfffffffc}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001200)=""/122, 0x7a}, {&(0x7f0000001380)=""/209, 0xd1}], 0x3, &(0x7f0000001480)=""/37, 0x25}, 0x3c}], 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001880)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r7, 0xd, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffffa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x3, 0x7, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0xd, 0x0, {0x1, @usage=0x101, 0x0, 0xfffffffffffffffe, 0x3, 0xfffffffffffffe01, 0x3, 0xaf7, 0x0, @struct={0x3, 0x1}, 0x0, 0xff, [0x0, 0x0, 0x1fa, 0x9, 0x45, 0x9]}, {0x0, @struct={0x2, 0x400}, r5, 0x0, 0x478, 0x5fd6, 0x2, 0x3, 0x80, @struct={0xfffffff9, 0x800}, 0x0, 0x7, [0x71974ebb, 0x3, 0x7, 0x7, 0x0, 0x7ce1]}, {0x8000, @usage=0xb784, r7, 0x1000, 0x6, 0xfff, 0x80000000, 0x8, 0x8, @usage, 0x7, 0xd3c9, [0x0, 0x9, 0x0, 0x2, 0x81, 0x80000000]}, {0x4, 0x5, 0x400}}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r7, @ANYBLOB="3a3030303030303030303030303030208ae375323867"]) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x300, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) unlinkat(0xffffffffffffffff, 0x0, 0x0) 2.590916572s ago: executing program 0 (id=4168): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@id, 0x10) 2.440653206s ago: executing program 0 (id=4170): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000004780)=[{&(0x7f0000002700)=""/69, 0x45}, {0x0}], 0x2) 2.288136907s ago: executing program 0 (id=4172): socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) gettid() sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000840)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffed08d2e19a5c24a93497d82c0c7385ab2b292684bdcc895cde6a2fd251af6056ae618e6249d81ad4d0529e852eb69f1a48d2f2021981d964d5e260677f47278d7221016f636f1c41096b873d5f8d9902a46fe0e8ee9516ef17d91841e6c70304ecf3ae73e8a7d4b8a8530dafc01ff67988f3946f31bbd4354640e7e2bf93b2"], 0x28) unshare(0x20000400) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0xc, 0x6, 0x5}, 0x14}}, 0x0) recvmsg(r2, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x3c) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x7a, &(0x7f0000000d80)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "de5c4f", 0x44, 0x2f, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000}) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x281, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x80, 0x40, 0x0, 0x7}}) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x42000000) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$tipc(r5, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0) 1.927269575s ago: executing program 3 (id=4175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000005c0)="c7", 0x1}, {&(0x7f0000000640)="5bbb5221a4a46514dc57", 0xa}], 0x2}], 0x1, 0x0) 1.80050068s ago: executing program 3 (id=4176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.375965126s ago: executing program 3 (id=4177): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x4237, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000001c0)) r1 = io_uring_setup(0x34d, &(0x7f0000000300)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000000, r2) 1.236279044s ago: executing program 3 (id=4178): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 791.398713ms ago: executing program 3 (id=4179): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@id, 0x10) 726.416949ms ago: executing program 0 (id=4180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000020904000012ffff0002052406000005240000000d24022e000000000008000000000800"/77], 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000140), 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000200)='X', 0xfffffffffffffe7b, 0xfffffffffffffffa) r11 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r10, r11, r11}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) socket$unix(0x1, 0x2, 0x0) 0s ago: executing program 3 (id=4181): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000004780)=[{&(0x7f0000002700)=""/69, 0x45}, {0x0}], 0x2) kernel console output (not intermixed with test programs): 05.520629][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 905.526025][T10515] usb 3-1: Product: syz [ 905.531513][T10515] usb 3-1: Manufacturer: syz [ 905.546731][T10515] usb 3-1: SerialNumber: syz [ 905.553534][ T58] usb 1-1: config index 0 descriptor too short (expected 30482, got 18) [ 905.572063][ T58] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 905.594180][ T58] usb 1-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 905.612679][ T58] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 101 [ 905.625248][ T58] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 905.640494][ T58] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 905.654400][ T58] usb 1-1: Product: syz [ 905.658678][ T58] usb 1-1: Manufacturer: syz [ 905.685471][ T58] usb 1-1: config 0 descriptor?? [ 905.707107][T16239] usb 4-1: config index 0 descriptor too short (expected 28764, got 92) [ 905.727580][T16239] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 905.758746][T16239] usb 4-1: config 2 has no interfaces? [ 905.772356][T16239] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.795023][T10515] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 905.815421][T16239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.840529][T16239] usb 4-1: Product: syz [ 905.850970][T16239] usb 4-1: Manufacturer: syz [ 905.855676][T16239] usb 4-1: SerialNumber: syz [ 906.061027][ T58] usb 1-1: USB disconnect, device number 47 [ 906.239451][T14726] usb 3-1: USB disconnect, device number 43 [ 906.272154][T14726] usblp0: removed [ 906.393583][T16239] usb 4-1: USB disconnect, device number 39 [ 907.176121][T18986] trusted_key: encrypted_key: keyword 'ne)ê»!0¤Lt' not recognized [ 907.255249][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 907.420711][ T5150] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 907.502339][ T29] audit: type=1326 audit(1720492177.871:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18995 comm="syz.2.3844" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e6579 code=0x0 [ 907.541461][T19002] vivid-002: disconnect [ 907.558034][T19000] vivid-002: reconnect [ 907.619513][ T29] audit: type=1326 audit(1720492177.981:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18995 comm="syz.2.3844" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e6579 code=0x0 [ 907.675201][ T5150] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=76.9e [ 907.690561][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.730791][ T5150] usb 5-1: config 0 descriptor?? [ 907.786826][ T29] audit: type=1326 audit(1720492178.151:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18995 comm="syz.2.3844" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e6579 code=0x0 [ 907.980936][ T5150] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 908.020339][ T5150] usb 5-1: USB disconnect, device number 41 [ 908.447637][ T2469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.688800][ T2469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.953884][ T2469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.040880][ T58] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 909.145326][ T2469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.261917][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 909.281661][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 909.321457][ T58] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 909.360248][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 909.390903][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.415895][ T4491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.429184][ T4491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.438557][ T4491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.447193][ T4491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.455005][ T58] usb 3-1: Product: syz [ 909.460926][ T58] usb 3-1: Manufacturer: syz [ 909.465667][ T4491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 909.473562][ T58] usb 3-1: SerialNumber: syz [ 909.478322][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.530820][T14726] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 909.569679][ T2469] bridge_slave_1: left allmulticast mode [ 909.599289][ T2469] bridge_slave_1: left promiscuous mode [ 909.626436][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.678595][ T2469] bridge_slave_0: left allmulticast mode [ 909.690563][ T2469] bridge_slave_0: left promiscuous mode [ 909.718379][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.742840][T14726] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 909.759119][ T58] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 909.780055][T14726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.824115][T14726] usb 2-1: config 0 descriptor?? [ 909.856612][T14726] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 910.548508][T16239] usb 3-1: USB disconnect, device number 44 [ 910.583157][T16239] usblp0: removed [ 911.176016][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.207090][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.237446][ T2469] bond0 (unregistering): Released all slaves [ 911.295669][T19031] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 911.315235][T19031] hsr0: entered promiscuous mode [ 911.361283][T19031] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 911.410652][T19031] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 911.438128][T19031] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 911.452312][T19031] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 911.558500][ T5105] Bluetooth: hci2: command tx timeout [ 911.699125][ T29] audit: type=1326 audit(1720492182.061:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.2.3861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e6579 code=0x0 [ 911.820778][ T29] audit: type=1326 audit(1720492182.181:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.2.3861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e6579 code=0x0 [ 911.983564][ T29] audit: type=1326 audit(1720492182.351:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19047 comm="syz.2.3861" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e6579 code=0x0 [ 912.229699][ T2469] hsr_slave_0: left promiscuous mode [ 912.251411][ T2469] hsr_slave_1: left promiscuous mode [ 912.262324][T14726] usb 2-1: USB disconnect, device number 50 [ 912.284266][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.321533][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.339584][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.371860][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.483397][ T2469] veth1_macvtap: left promiscuous mode [ 912.498176][ T2469] veth0_macvtap: left promiscuous mode [ 912.519554][ T2469] veth1_vlan: left promiscuous mode [ 912.540686][ T2469] veth0_vlan: left promiscuous mode [ 913.634834][ T5105] Bluetooth: hci2: command tx timeout [ 913.718280][ T58] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 913.911435][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 913.919784][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 913.940826][ T58] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 914.015294][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 914.030589][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.069309][ T58] usb 3-1: Product: syz [ 914.075392][ T58] usb 3-1: Manufacturer: syz [ 914.080079][ T58] usb 3-1: SerialNumber: syz [ 914.330092][ T58] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 914.475557][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 914.670692][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 914.876932][T10515] usb 3-1: USB disconnect, device number 45 [ 914.910827][T10515] usblp0: removed [ 915.710762][ T5105] Bluetooth: hci2: command tx timeout [ 916.285006][T19089] netlink: 'syz.3.3870': attribute type 10 has an invalid length. [ 916.299949][T19089] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 916.340691][T19089] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 916.380927][T19089] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 916.430531][T19089] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 917.015969][T19027] chnl_net:caif_netlink_parms(): no params data found [ 917.492382][T16074] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 917.500563][T19027] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.538782][T19027] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.561311][T16239] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 917.580315][T19027] bridge_slave_0: entered allmulticast mode [ 917.607372][T19027] bridge_slave_0: entered promiscuous mode [ 917.643934][T19027] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.670744][T19027] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.678151][T19027] bridge_slave_1: entered allmulticast mode [ 917.713716][T16074] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 917.735377][T16074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.747520][T19027] bridge_slave_1: entered promiscuous mode [ 917.780093][T16074] usb 4-1: config 0 descriptor?? [ 917.792059][ T5105] Bluetooth: hci2: command tx timeout [ 917.799598][T16239] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=76.9e [ 917.819106][T16239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.832303][T16074] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 917.844046][T16239] usb 3-1: config 0 descriptor?? [ 917.926428][ T2469] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.969378][ T4491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 917.993847][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 918.003702][ T4491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 918.026936][ T4491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 918.039469][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 918.051091][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 918.100929][T16239] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 918.141051][T16239] usb 3-1: USB disconnect, device number 46 [ 918.418923][ T2469] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.486614][T19027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.527425][T19027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.645709][ T2469] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.798550][ T2469] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.009538][T19027] team0: Port device team_slave_0 added [ 919.064546][T19027] team0: Port device team_slave_1 added [ 919.311191][T19027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.349485][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.467261][T19027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.508090][T19027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.538061][T19027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.621832][T19027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.894356][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 919.907030][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 919.920396][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 919.938077][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 919.953751][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 919.962244][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.120616][ T5105] Bluetooth: hci1: command tx timeout [ 920.270139][T10515] usb 4-1: USB disconnect, device number 40 [ 920.277179][ T2469] bridge_slave_1: left allmulticast mode [ 920.297569][ T2469] bridge_slave_1: left promiscuous mode [ 920.310786][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.332521][ T2469] bridge_slave_0: left allmulticast mode [ 920.338238][ T2469] bridge_slave_0: left promiscuous mode [ 920.353605][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.357121][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.391191][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.416091][ T2469] bond0 (unregistering): Released all slaves [ 921.600580][ T58] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 921.649597][T19027] hsr_slave_0: entered promiscuous mode [ 921.667828][T19027] hsr_slave_1: entered promiscuous mode [ 921.689166][T19027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.701970][T19027] Cannot create hsr debugfs directory [ 921.780529][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 921.788549][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 921.828430][ T58] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 921.864052][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 921.891102][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.899170][ T58] usb 4-1: Product: syz [ 921.927796][ T58] usb 4-1: Manufacturer: syz [ 921.939764][ T58] usb 4-1: SerialNumber: syz [ 922.033001][ T5105] Bluetooth: hci0: command tx timeout [ 922.141690][T19125] chnl_net:caif_netlink_parms(): no params data found [ 922.191756][ T5105] Bluetooth: hci1: command tx timeout [ 922.236412][ T58] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 922.551676][ T2469] hsr_slave_0: left promiscuous mode [ 922.574947][ T2469] hsr_slave_1: left promiscuous mode [ 922.582984][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.620601][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.641598][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.649131][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.733349][ T2469] veth1_macvtap: left promiscuous mode [ 922.738994][ T2469] veth0_macvtap: left promiscuous mode [ 922.761355][ T2469] veth1_vlan: left promiscuous mode [ 922.771600][ T2469] veth0_vlan: left promiscuous mode [ 922.831563][ T5147] usb 4-1: USB disconnect, device number 41 [ 922.848537][ T5147] usblp0: removed [ 924.099319][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 924.112518][ T5105] Bluetooth: hci0: command tx timeout [ 924.194418][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 924.282609][ T5105] Bluetooth: hci1: command tx timeout [ 925.453356][T19157] netlink: 'syz.3.3884': attribute type 4 has an invalid length. [ 925.500723][T19158] netlink: 'syz.3.3884': attribute type 4 has an invalid length. [ 926.029894][T19162] macsec1: entered promiscuous mode [ 926.059466][T19162] macsec1: entered allmulticast mode [ 926.110492][T19162] hsr0: entered allmulticast mode [ 926.115613][T19162] hsr_slave_0: entered allmulticast mode [ 926.150589][T19162] hsr_slave_1: entered allmulticast mode [ 926.186560][T19162] hsr0: left allmulticast mode [ 926.195994][ T5105] Bluetooth: hci0: command tx timeout [ 926.221048][T19162] hsr_slave_0: left allmulticast mode [ 926.226528][T19162] hsr_slave_1: left allmulticast mode [ 926.301432][ T58] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 926.351042][ T5105] Bluetooth: hci1: command tx timeout [ 926.519508][ T58] usb 4-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 926.540155][ T58] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 926.580202][ T58] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 926.605240][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.628231][ T58] usb 4-1: Product: syz [ 926.639397][ T58] usb 4-1: Manufacturer: syz [ 926.651096][ T58] usb 4-1: SerialNumber: syz [ 926.684777][T19125] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.710809][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.718397][T19125] bridge_slave_0: entered allmulticast mode [ 926.743668][T19125] bridge_slave_0: entered promiscuous mode [ 926.773440][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.790841][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.811396][T19125] bridge_slave_1: entered allmulticast mode [ 926.819627][T19125] bridge_slave_1: entered promiscuous mode [ 927.003852][ T58] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 927.064698][ T58] usb 4-1: USB disconnect, device number 42 [ 927.173633][T19125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.207454][T19125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.522452][T19145] chnl_net:caif_netlink_parms(): no params data found [ 927.620711][T19125] team0: Port device team_slave_0 added [ 927.682276][T19125] team0: Port device team_slave_1 added [ 927.805532][T19125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.812720][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.851072][T19125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.883422][T19125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.910619][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.958430][T19125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.181918][T19145] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.189330][T19145] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.221803][T19145] bridge_slave_0: entered allmulticast mode [ 928.242443][T19145] bridge_slave_0: entered promiscuous mode [ 928.270859][ T5105] Bluetooth: hci0: command tx timeout [ 928.378068][ T2469] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.548731][T19145] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.571045][T19145] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.588774][T19145] bridge_slave_1: entered allmulticast mode [ 928.616528][T19145] bridge_slave_1: entered promiscuous mode [ 928.710021][ T2469] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.757991][T19027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 928.859944][ T2469] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.985435][T19125] hsr_slave_0: entered promiscuous mode [ 929.005331][T19125] hsr_slave_1: entered promiscuous mode [ 929.021662][T19125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.039955][T19125] Cannot create hsr debugfs directory [ 929.109048][T19145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.143179][T19145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.165803][T19027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 929.211703][T19027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 929.335853][ T2469] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.655610][T19027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 929.754722][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.775179][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.791178][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.801704][T19145] team0: Port device team_slave_0 added [ 929.809692][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.821037][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 929.831178][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.019378][T19145] team0: Port device team_slave_1 added [ 930.116034][T19208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 930.142970][T19145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.150028][T19145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.185193][T19145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.262437][T19145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.269577][T19145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.313597][T19145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.721035][T19223] fuse: Unknown parameter '0xffffffffffffffff' [ 930.771540][T19145] hsr_slave_0: entered promiscuous mode [ 930.790262][T19145] hsr_slave_1: entered promiscuous mode [ 930.805332][T19145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.817106][T19145] Cannot create hsr debugfs directory [ 930.829068][ T2469] bridge_slave_1: left allmulticast mode [ 930.840738][ T2469] bridge_slave_1: left promiscuous mode [ 930.861328][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.875323][ T2469] bridge_slave_0: left allmulticast mode [ 930.898134][ T2469] bridge_slave_0: left promiscuous mode [ 930.905580][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.610908][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.627079][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.646751][ T2469] bond0 (unregistering): Released all slaves [ 931.960644][ T5105] Bluetooth: hci3: command tx timeout [ 932.033659][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.040454][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.553118][ T2469] hsr_slave_0: left promiscuous mode [ 932.559408][ T2469] hsr_slave_1: left promiscuous mode [ 932.574294][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.582118][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.590163][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.598427][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.629606][ T2469] veth1_macvtap: left promiscuous mode [ 932.637982][ T2469] veth0_macvtap: left promiscuous mode [ 932.650774][ T2469] veth1_vlan: left promiscuous mode [ 932.656156][ T2469] veth0_vlan: left promiscuous mode [ 933.367626][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 933.429974][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 934.036210][ T5105] Bluetooth: hci3: command tx timeout [ 934.145440][T19027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.329116][T19257] fuse: Unknown parameter '0xffffffffffffffff' [ 934.447439][T19027] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.517895][T19202] chnl_net:caif_netlink_parms(): no params data found [ 934.592965][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.600274][T14726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.848666][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.856135][T14726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.071125][T19202] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.078428][T19202] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.113369][T19202] bridge_slave_0: entered allmulticast mode [ 935.130344][T19202] bridge_slave_0: entered promiscuous mode [ 935.143600][T19202] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.154208][T19202] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.164007][T19202] bridge_slave_1: entered allmulticast mode [ 935.172540][T19202] bridge_slave_1: entered promiscuous mode [ 935.265227][T19125] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 935.345609][T19289] fuse: Unknown parameter '0xffffffffffffffff' [ 935.348884][T19202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.379143][T19202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.445356][T19125] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 935.470892][T19125] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 935.561711][T19125] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 935.606624][T19202] team0: Port device team_slave_0 added [ 935.618413][T19202] team0: Port device team_slave_1 added [ 935.859102][T19202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.872824][T19202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.904262][T19202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.964991][T19304] fuse: Unknown parameter '0xffffffffffffffff' [ 936.005646][ T2469] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.063043][T19202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.070602][T19202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.110724][ T5105] Bluetooth: hci3: command tx timeout [ 936.128442][T19202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.223006][ T2469] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.370720][ T29] audit: type=1326 audit(1720492206.731:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.3.3922" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7431579 code=0x0 [ 936.403828][ T29] audit: type=1326 audit(1720492206.731:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.3.3922" exe="/root/syz-executor" sig=31 arch=40000003 syscall=436 compat=1 ip=0xf7431579 code=0x0 [ 936.499579][ T2469] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.576188][T19202] hsr_slave_0: entered promiscuous mode [ 936.593422][T19202] hsr_slave_1: entered promiscuous mode [ 936.611943][T19202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.619614][T19202] Cannot create hsr debugfs directory [ 936.748825][ T2469] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.791656][T19145] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 936.873946][T19145] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 936.893741][T19145] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 936.992584][T19145] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 937.090268][T19027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.417053][ T2469] bridge_slave_1: left allmulticast mode [ 937.424283][ T2469] bridge_slave_1: left promiscuous mode [ 937.442137][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.464888][ T2469] bridge_slave_0: left allmulticast mode [ 937.481581][ T2469] bridge_slave_0: left promiscuous mode [ 937.491463][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.048334][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.068091][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.080156][ T2469] bond0 (unregistering): Released all slaves [ 938.190722][ T5105] Bluetooth: hci3: command tx timeout [ 938.418828][T19125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.513874][T19027] veth0_vlan: entered promiscuous mode [ 938.678203][T19125] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.756077][ T2469] hsr_slave_0: left promiscuous mode [ 938.765102][ T2469] hsr_slave_1: left promiscuous mode [ 938.774080][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.796272][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.806322][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.828168][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.890795][ T2469] veth1_macvtap: left promiscuous mode [ 938.896424][ T2469] veth0_macvtap: left promiscuous mode [ 938.913608][ T2469] veth1_vlan: left promiscuous mode [ 938.919046][ T2469] veth0_vlan: left promiscuous mode [ 940.161197][ T5150] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 940.294869][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 940.360931][ T5150] usb 4-1: Using ep0 maxpacket: 8 [ 940.371171][ T5150] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 940.405524][ T5150] usb 4-1: config 0 has no interface number 0 [ 940.414169][ T5150] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xFE has an invalid bInterval 0, changing to 7 [ 940.450658][ T5150] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 940.473869][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.474933][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 940.501904][ T5150] usb 4-1: config 0 descriptor?? [ 940.525089][ T5150] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 940.808063][T16170] usb 4-1: USB disconnect, device number 43 [ 940.841243][T16170] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 941.356038][T19027] veth1_vlan: entered promiscuous mode [ 941.372992][ T933] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.380244][ T933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.496728][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.504106][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.696762][T19145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.972817][T19202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 941.990039][T19202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 942.024538][T19027] veth0_macvtap: entered promiscuous mode [ 942.054325][T19145] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.070571][T19202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 942.086234][T19027] veth1_macvtap: entered promiscuous mode [ 942.103619][ T5150] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 942.115040][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.122857][T14726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.142138][T19202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 942.205698][T16170] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.213031][T16170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.281979][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.317234][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.333304][ T5150] usb 4-1: not running at top speed; connect to a high speed hub [ 942.338032][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.343808][ T5150] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 942.380602][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.401023][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.401063][ T5150] usb 4-1: config 1 interface 0 has no altsetting 0 [ 942.420673][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.441581][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.443415][ T5150] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.480556][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.490830][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.490864][ T5150] usb 4-1: Product: 鬲隉 [ 942.490882][ T5150] usb 4-1: SerialNumber: syz [ 942.507308][T19409] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 942.532436][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.557998][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.574303][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.585324][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.596229][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 942.607586][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.620230][T19027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.707498][T19125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.740214][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.771997][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.799733][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.803689][ T5150] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 942.830915][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.852169][ T5150] usb 4-1: USB disconnect, device number 44 [ 942.872137][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.903735][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.935446][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 942.967501][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 942.992267][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.020616][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.040557][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.060504][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.085611][T19027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.104035][T19027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.137093][T19027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.196993][T19027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.220598][T19027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.242973][T19027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.265381][T19027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.674477][T19145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.695458][T19125] veth0_vlan: entered promiscuous mode [ 943.732289][T19125] veth1_vlan: entered promiscuous mode [ 943.858394][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.900032][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.955646][T19125] veth0_macvtap: entered promiscuous mode [ 944.009592][T19202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.036036][T19125] veth1_macvtap: entered promiscuous mode [ 944.065923][T18904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.086261][T18904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.146239][T19145] veth0_vlan: entered promiscuous mode [ 944.208923][T19202] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.277170][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.303179][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.327834][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.339049][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.360793][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.390164][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.410470][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.433509][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.468106][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.478992][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.490698][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.503486][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.516572][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.546272][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.567807][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.599093][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.623005][T19125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.653142][T19145] veth1_vlan: entered promiscuous mode [ 944.664542][T14726] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.671898][T14726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.700690][T16239] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 944.747792][T14726] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.755146][T14726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.797263][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.827972][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.851291][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.871826][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.900727][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.925824][T16239] usb 4-1: config 0 interface 0 has no altsetting 0 [ 944.940504][T16239] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 944.949743][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.963242][T19455] netlink: 'syz.0.3936': attribute type 29 has an invalid length. [ 944.970629][T16239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.982413][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.003650][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.023407][T16239] usb 4-1: config 0 descriptor?? [ 945.045748][T16239] usb 4-1: selecting invalid altsetting 0 [ 945.048686][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.060797][T16239] usb 4-1: can't set first interface for hiFace device. [ 945.067911][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.075405][T16239] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 945.092779][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.109632][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.126352][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.137530][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.152670][T19125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.164299][T19125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.176896][T19125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.194040][T19455] netlink: 'syz.0.3936': attribute type 29 has an invalid length. [ 945.202610][T19458] netlink: 'syz.0.3936': attribute type 29 has an invalid length. [ 945.258204][T19125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.290557][T19125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.299720][T19125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.333382][T16239] usb 4-1: USB disconnect, device number 45 [ 945.357830][T19125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.499113][T19145] veth0_macvtap: entered promiscuous mode [ 945.567803][T19145] veth1_macvtap: entered promiscuous mode [ 945.721555][ T29] audit: type=1326 audit(1720492216.091:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 945.759587][ T29] audit: type=1326 audit(1720492216.091:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 945.775710][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.831097][ T29] audit: type=1326 audit(1720492216.161:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 945.856990][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.868705][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.880129][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.890782][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.902456][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.907985][ T29] audit: type=1326 audit(1720492216.201:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 945.923273][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.971422][ T29] audit: type=1326 audit(1720492216.201:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 945.999576][ T29] audit: type=1326 audit(1720492216.201:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 946.011868][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.024459][ T29] audit: type=1326 audit(1720492216.221:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 946.074389][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.088552][ T29] audit: type=1326 audit(1720492216.221:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.0.3938" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x0 [ 946.107723][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.146242][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.152698][ T29] audit: type=1326 audit(1720492216.371:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19474 comm="syz.0.3938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 946.175240][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.222867][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.248335][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.292013][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.313844][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.335204][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.355347][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.368202][T19145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.424722][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.440050][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.485103][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.497301][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.530737][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.560648][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.591620][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.617628][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.628700][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.651156][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.677546][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.694998][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.712703][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.730461][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.742057][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.755895][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.768368][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.779389][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.791730][T19145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.802916][T19145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.819179][T19145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.856919][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.869839][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.896791][T19202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.914394][T19145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.934623][T19145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.944001][T19145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.955847][T19145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.414932][T19202] veth0_vlan: entered promiscuous mode [ 947.474276][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.512726][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.534420][T19202] veth1_vlan: entered promiscuous mode [ 947.637286][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.651035][T14726] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 947.659011][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.724935][T19202] veth0_macvtap: entered promiscuous mode [ 947.753689][T19202] veth1_macvtap: entered promiscuous mode [ 947.824079][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.850803][T14726] usb 2-1: Using ep0 maxpacket: 8 [ 947.860909][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.868504][T14726] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 947.878265][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.908001][T14726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.931914][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.942540][T14726] usb 2-1: config 0 descriptor?? [ 947.962063][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.962112][T14726] gspca_main: spca501-2.14.0 probing 0000:0000 [ 948.000577][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.027122][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.074095][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.098225][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.122070][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.145313][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.171752][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.198820][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.221070][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.233786][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.244795][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.255156][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.266445][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.279542][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.292908][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.309544][T19202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.338893][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.359341][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.369714][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.382733][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.393134][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.407484][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.426781][T14726] gspca_spca501: reg write: error -71 [ 948.434743][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.445633][T14726] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 948.453099][T14726] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 948.461627][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.474314][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.485890][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.499304][T14726] usb 2-1: USB disconnect, device number 51 [ 948.523192][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.560726][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.582814][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.597678][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.611657][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.623604][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.635366][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.646921][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.662835][T19202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.686987][T19202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.721571][T19202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.811733][T19202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.821047][T19202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.831226][T19202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.840619][T19202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.011951][T19536] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 949.049578][T19538] ip6tnl0: Master is either lo or non-ether device [ 949.275501][T18912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.298949][T18912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.364308][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.374550][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.426883][T16170] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 949.651717][T16170] usb 5-1: Using ep0 maxpacket: 32 [ 949.671915][T16170] usb 5-1: config 0 has no interfaces? [ 949.697585][T16170] usb 5-1: New USB device found, idVendor=1410, idProduct=7005, bcdDevice=62.dc [ 949.741433][T16170] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.769998][T16170] usb 5-1: Product: syz [ 949.782572][ T29] audit: type=1326 audit(1720492220.151:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19557 comm="syz.2.3888" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7431579 code=0x0 [ 949.807010][T16170] usb 5-1: Manufacturer: syz [ 949.828475][T16170] usb 5-1: SerialNumber: syz [ 949.867319][T16170] usb 5-1: config 0 descriptor?? [ 949.948391][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3888'. [ 950.095716][T16074] usb 5-1: USB disconnect, device number 42 [ 950.486061][T19585] netlink: 'syz.3.3978': attribute type 3 has an invalid length. [ 950.660549][T16170] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 950.863351][T16170] usb 1-1: config 0 interface 0 has no altsetting 0 [ 950.870049][T16170] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 950.922674][T16170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.996757][T16170] usb 1-1: config 0 descriptor?? [ 951.022926][T16170] usb 1-1: selecting invalid altsetting 0 [ 951.067625][T16170] usb 1-1: can't set first interface for hiFace device. [ 951.127266][T16170] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 951.294974][T16170] usb 1-1: USB disconnect, device number 48 [ 951.406894][T19612] netlink: 'syz.4.3987': attribute type 10 has an invalid length. [ 951.466487][T19612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3987'. [ 951.502195][T19612] bridge0: port 3(gretap0) entered blocking state [ 951.543178][T19612] bridge0: port 3(gretap0) entered disabled state [ 951.550054][T19612] gretap0: entered allmulticast mode [ 951.567909][T19612] gretap0: entered promiscuous mode [ 951.583718][T19612] bridge0: port 3(gretap0) entered blocking state [ 951.591439][T19612] bridge0: port 3(gretap0) entered forwarding state [ 952.019884][ T29] audit: type=1326 audit(1720492222.381:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19619 comm="syz.3.3993" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7431579 code=0x0 [ 952.059649][ T1095] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.142338][T19624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3993'. [ 952.329143][ T1095] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.436103][T19630] ALSA: mixer_oss: invalid OSS volume '‰' [ 952.591389][ T1095] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.641976][T19638] netlink: 'syz.0.4000': attribute type 10 has an invalid length. [ 952.661903][T19638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4000'. [ 952.678716][T19638] bridge0: port 3(gretap0) entered blocking state [ 952.694328][T19638] bridge0: port 3(gretap0) entered disabled state [ 952.720811][T19638] gretap0: entered allmulticast mode [ 952.737738][T19638] gretap0: entered promiscuous mode [ 952.748943][T19638] bridge0: port 3(gretap0) entered blocking state [ 952.755746][T19638] bridge0: port 3(gretap0) entered forwarding state [ 952.845631][ T4491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 952.862786][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 952.883807][ T4491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 952.911860][ T4491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 952.924942][ T1095] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.938301][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 952.953612][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 953.280757][T16170] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 953.501588][T19656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 953.532557][T16170] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 953.591363][T16170] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 5.86 [ 953.630953][T16170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.664074][ T1095] bridge_slave_1: left allmulticast mode [ 953.681606][T16170] usb 4-1: Product: syz [ 953.683198][ T1095] bridge_slave_1: left promiscuous mode [ 953.697105][T16170] usb 4-1: Manufacturer: syz [ 953.702737][T16170] usb 4-1: SerialNumber: syz [ 953.733569][T16170] usb 4-1: config 0 descriptor?? [ 953.751170][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.784150][T16170] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 953.809787][ T1095] bridge_slave_0: left allmulticast mode [ 953.841980][ T1095] bridge_slave_0: left promiscuous mode [ 953.849006][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.493081][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 954.509145][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 954.520804][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 954.534968][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 954.554108][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 954.565175][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 954.992311][ T5105] Bluetooth: hci1: command tx timeout [ 955.167329][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.181867][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.194678][ T1095] bond0 (unregistering): Released all slaves [ 955.263230][T19662] netlink: 'syz.0.4011': attribute type 11 has an invalid length. [ 955.292178][T19662] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4011'. [ 955.647124][T16170] usb 4-1: USB disconnect, device number 46 [ 955.660204][T16170] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 955.936442][T19648] chnl_net:caif_netlink_parms(): no params data found [ 956.038051][ T1095] hsr_slave_0: left promiscuous mode [ 956.066439][ T1095] hsr_slave_1: left promiscuous mode [ 956.111923][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.140738][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.171424][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.178963][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.241440][ T1095] veth1_macvtap: left promiscuous mode [ 956.253567][ T1095] veth0_macvtap: left promiscuous mode [ 956.263095][ T1095] veth1_vlan: left promiscuous mode [ 956.291742][ T1095] veth0_vlan: left promiscuous mode [ 956.671143][ T5105] Bluetooth: hci3: command tx timeout [ 957.071871][ T5105] Bluetooth: hci1: command tx timeout [ 957.729740][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 957.788307][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 957.825794][T16074] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 958.053119][T16074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 958.068694][T16074] usb 1-1: string descriptor 0 read error: -22 [ 958.076022][T16074] usb 1-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 958.087056][T16074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.109185][T16074] usb 1-1: config 0 descriptor?? [ 958.118569][T19697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 958.137664][T16074] r8712u: register rtl8712_netdev_ops to netdev_ops [ 958.150093][T16074] usb 1-1: r8712u: USB_SPEED_LOW with 1 endpoints [ 958.344553][T16074] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 958.355674][T16074] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 958.363960][T16074] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 958.383722][T16074] usb 1-1: USB disconnect, device number 49 [ 958.680364][T19691] netlink: 'syz.3.4014': attribute type 10 has an invalid length. [ 958.701797][T19691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4014'. [ 958.716832][T19691] bridge0: port 3(gretap0) entered blocking state [ 958.734524][T19691] bridge0: port 3(gretap0) entered disabled state [ 958.750955][ T5105] Bluetooth: hci3: command tx timeout [ 958.766244][T19691] gretap0: entered allmulticast mode [ 958.775836][T19691] gretap0: entered promiscuous mode [ 958.782208][T19691] bridge0: port 3(gretap0) entered blocking state [ 958.789921][T19691] bridge0: port 3(gretap0) entered forwarding state [ 959.154006][ T5105] Bluetooth: hci1: command tx timeout [ 959.597185][T19648] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.604773][T19648] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.612805][T19648] bridge_slave_0: entered allmulticast mode [ 959.621881][T19648] bridge_slave_0: entered promiscuous mode [ 959.633608][T19648] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.641812][T19648] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.649181][T19648] bridge_slave_1: entered allmulticast mode [ 959.659366][T19648] bridge_slave_1: entered promiscuous mode [ 959.859439][T19648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.912913][T19648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.040631][ T5150] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 960.208995][T19648] team0: Port device team_slave_0 added [ 960.231981][ T5150] usb 1-1: Using ep0 maxpacket: 32 [ 960.239972][ T5150] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 960.274798][ T5150] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 960.284983][T14726] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 960.297452][T19648] team0: Port device team_slave_1 added [ 960.328829][ T5150] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.379999][ T5150] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 960.410191][ T5150] usb 1-1: config 1 has no interface number 0 [ 960.437270][ T5150] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 960.469341][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.502524][T14726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 10 [ 960.527873][ T5150] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 960.543939][T14726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 960.560153][T19667] chnl_net:caif_netlink_parms(): no params data found [ 960.574615][T14726] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 960.615414][T14726] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.638897][T14726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.648395][T19648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.667472][T19648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.669022][T14726] usb 4-1: config 0 descriptor?? [ 960.727423][ T5150] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 960.738273][ T5150] snd_usb_pod 1-1:1.1: invalid control EP [ 960.744603][T19648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.765569][ T5150] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 960.772796][ T5150] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 960.783820][ T5150] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 960.836209][ T5105] Bluetooth: hci3: command tx timeout [ 960.875663][T19648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.887250][T19648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.915801][T19648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.035844][T16074] usb 1-1: USB disconnect, device number 50 [ 961.084241][ T1095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.127474][T19742] netlink: 'syz.4.4026': attribute type 10 has an invalid length. [ 961.136016][T19742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4026'. [ 961.156015][T14726] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 961.176295][T14726] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 961.190675][T14726] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 961.230981][ T5105] Bluetooth: hci1: command tx timeout [ 961.368058][ T1095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.399201][T19745] netlink: 'syz.4.4027': attribute type 11 has an invalid length. [ 961.419735][T19745] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4027'. [ 961.503705][ T1095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.557167][T19648] hsr_slave_0: entered promiscuous mode [ 961.576511][T19648] hsr_slave_1: entered promiscuous mode [ 961.589671][T19648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.598540][T19648] Cannot create hsr debugfs directory [ 961.707554][ T29] audit: type=1326 audit(1720492232.071:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19748 comm="syz.4.4028" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743c579 code=0x0 [ 961.822391][ T1095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.874249][T19667] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.884650][T19667] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.892893][T19667] bridge_slave_0: entered allmulticast mode [ 961.903613][T19667] bridge_slave_0: entered promiscuous mode [ 961.912506][T19755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4028'. [ 961.931860][T19667] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.939213][T19667] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.947704][T19667] bridge_slave_1: entered allmulticast mode [ 961.956943][T19667] bridge_slave_1: entered promiscuous mode [ 962.339042][T19667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.376991][T19667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.653780][T19667] team0: Port device team_slave_0 added [ 962.691197][T19667] team0: Port device team_slave_1 added [ 962.698102][T14726] usb 4-1: reset full-speed USB device number 47 using dummy_hcd [ 962.910799][ T5105] Bluetooth: hci3: command tx timeout [ 962.935994][T19667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.947454][T19667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.001692][T19667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.141435][T19667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.180475][T19667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.215074][T19667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.242863][T19782] netlink: 'syz.4.4036': attribute type 10 has an invalid length. [ 963.257028][T19782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4036'. [ 963.340312][ T1095] bridge_slave_1: left allmulticast mode [ 963.353942][ T1095] bridge_slave_1: left promiscuous mode [ 963.361915][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.412406][ T1095] bridge_slave_0: left allmulticast mode [ 963.418160][ T1095] bridge_slave_0: left promiscuous mode [ 963.448054][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.585345][ T5150] usb 4-1: USB disconnect, device number 47 [ 963.662810][ T5154] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 963.872979][ T5154] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 963.882915][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.910710][ T5154] usb 1-1: config 0 descriptor?? [ 964.859984][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.897350][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.924125][ T1095] bond0 (unregistering): Released all slaves [ 965.012105][T19810] netlink: 'syz.3.4047': attribute type 10 has an invalid length. [ 965.044923][T19810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4047'. [ 965.058636][T19811] tipc: Started in network mode [ 965.090729][T19811] tipc: Node identity 1, cluster identity 4711 [ 965.100159][T19811] tipc: Node number set to 1 [ 965.239291][ T29] audit: type=1326 audit(1720492235.601:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.331929][ T29] audit: type=1326 audit(1720492235.601:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.432046][ T29] audit: type=1326 audit(1720492235.631:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.474604][ T29] audit: type=1326 audit(1720492235.631:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.518035][ T29] audit: type=1326 audit(1720492235.631:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.560191][ T29] audit: type=1326 audit(1720492235.631:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.625374][ T5154] pegasus 1-1:0.0: can't reset MAC [ 965.635388][ T5154] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 965.635570][ T29] audit: type=1326 audit(1720492235.631:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.659241][ T5154] usb 1-1: USB disconnect, device number 51 [ 965.677950][T19667] hsr_slave_0: entered promiscuous mode [ 965.686384][ T29] audit: type=1326 audit(1720492235.631:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.711152][T19667] hsr_slave_1: entered promiscuous mode [ 965.721558][ T29] audit: type=1326 audit(1720492235.641:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19787 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 965.752616][T19667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.760977][T19667] Cannot create hsr debugfs directory [ 965.851229][T16074] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 966.060311][T16074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 966.094196][T16074] usb 4-1: string descriptor 0 read error: -22 [ 966.105310][T16074] usb 4-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 966.128071][T16074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.153800][T16074] usb 4-1: config 0 descriptor?? [ 966.161324][T19821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 966.175275][T16074] r8712u: register rtl8712_netdev_ops to netdev_ops [ 966.182233][T16074] usb 4-1: r8712u: USB_SPEED_LOW with 1 endpoints [ 966.277770][T19827] netlink: 'syz.4.4054': attribute type 11 has an invalid length. [ 966.303108][T19827] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4054'. [ 966.337963][ T1095] hsr_slave_0: left promiscuous mode [ 966.363507][ T1095] hsr_slave_1: left promiscuous mode [ 966.390986][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.398928][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.399118][T16074] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 966.429110][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.450732][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.460554][T16074] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 966.468332][T16074] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 966.494547][T16074] usb 4-1: USB disconnect, device number 48 [ 966.601196][ T1095] veth1_macvtap: left promiscuous mode [ 966.617300][ T1095] veth0_macvtap: left promiscuous mode [ 966.629968][ T1095] veth1_vlan: left promiscuous mode [ 966.651027][ T1095] veth0_vlan: left promiscuous mode [ 968.242399][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 968.395500][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 968.800791][T14726] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 969.011450][T14726] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 969.020977][T14726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.032892][T14726] usb 1-1: config 0 descriptor?? [ 970.104974][T19648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 970.170584][ T5147] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 970.207049][T19648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 970.225582][T19648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 970.242924][T19648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 970.340848][T16170] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 970.357763][ T5147] usb 4-1: Using ep0 maxpacket: 16 [ 970.382391][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 970.399571][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 970.399594][ T29] audit: type=1326 audit(1720492240.761:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.438995][ T5147] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 970.449052][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.460916][ T5147] usb 4-1: config 0 descriptor?? [ 970.473783][ T29] audit: type=1326 audit(1720492240.761:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.526754][ T29] audit: type=1326 audit(1720492240.761:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.550547][ T29] audit: type=1326 audit(1720492240.761:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.574863][ T29] audit: type=1326 audit(1720492240.761:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.598973][T16170] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 970.614369][T16170] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 970.640112][ T29] audit: type=1326 audit(1720492240.761:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.653614][T16170] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 970.670547][ T29] audit: type=1326 audit(1720492240.781:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.735926][T16170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.748436][ T29] audit: type=1326 audit(1720492240.781:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.775631][T19865] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 970.807118][T14726] pegasus 1-1:0.0: can't reset MAC [ 970.818982][T14726] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 970.858369][ T29] audit: type=1326 audit(1720492240.781:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 970.872560][T14726] usb 1-1: USB disconnect, device number 52 [ 970.883632][T19648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.900080][T19862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.940941][T19862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.979394][ T29] audit: type=1326 audit(1720492240.801:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.0.4065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 971.011603][ T5147] hid (null): unknown global tag 0xd [ 971.017208][ T5147] hid (null): unknown global tag 0xe [ 971.064357][ T5147] hid-generic 0003:0158:0100.0029: unknown main item tag 0x1 [ 971.079986][T19648] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.101062][ T5147] hid-generic 0003:0158:0100.0029: unexpected long global item [ 971.109743][ T5147] hid-generic 0003:0158:0100.0029: probe with driver hid-generic failed with error -22 [ 971.141763][T16170] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.149067][T16170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.224737][T16074] usb 4-1: USB disconnect, device number 49 [ 971.258643][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.266119][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.340593][T19667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 971.404005][T19667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 971.469054][T19667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 971.584426][T19667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 971.927207][T19648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.133304][T19879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.160583][T19879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.257353][T19648] veth0_vlan: entered promiscuous mode [ 972.355103][T19648] veth1_vlan: entered promiscuous mode [ 972.471771][T19667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.582138][T19667] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.637616][T16170] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.645112][T16170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.707385][T19648] veth0_macvtap: entered promiscuous mode [ 972.755591][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.763007][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.825309][T19648] veth1_macvtap: entered promiscuous mode [ 973.176290][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.201148][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.223902][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.239863][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.260462][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.280472][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.300508][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.321860][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.342761][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.366476][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.380591][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.416088][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.431708][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.455750][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.470986][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.491184][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.501924][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.512968][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.527916][T19648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.582741][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.610556][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.630923][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.662778][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.680444][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.706127][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.720644][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.741753][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.766464][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.788652][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.812766][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.836269][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.858386][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.883933][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.900706][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.916062][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.932565][T19648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.951246][T19648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.983438][T19648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.019791][T19648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.052765][T19648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.093818][ T5155] usb 5-1: USB disconnect, device number 43 [ 974.100951][T19648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.127626][T19648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.387615][T19667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.461632][T16239] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 974.635352][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.660534][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.662914][T16239] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.714225][T16239] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 974.782261][T16239] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.801487][T16239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 974.809558][T16239] usb 1-1: SerialNumber: syz [ 974.817243][T19667] veth0_vlan: entered promiscuous mode [ 974.874915][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.890436][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.917752][T19667] veth1_vlan: entered promiscuous mode [ 975.055811][T19939] IPv4: Oversized IP packet from 127.202.26.0 [ 975.098962][T19667] veth0_macvtap: entered promiscuous mode [ 975.117164][T19959] xt_TCPMSS: Only works on TCP SYN packets [ 975.149564][T19667] veth1_macvtap: entered promiscuous mode [ 975.284739][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.360587][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.397804][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.436434][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.500450][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.520049][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 975.520071][ T29] audit: type=1326 audit(1720492245.881:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.531571][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.667228][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.677051][ T29] audit: type=1326 audit(1720492245.881:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.723525][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.751794][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.777299][ T29] audit: type=1326 audit(1720492245.941:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.783778][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.847924][ T29] audit: type=1326 audit(1720492245.941:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.889492][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 975.889719][ T29] audit: type=1326 audit(1720492245.941:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.918436][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 975.939086][ T29] audit: type=1326 audit(1720492245.971:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.980491][ T29] audit: type=1326 audit(1720492245.971:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 975.980796][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.051364][ T29] audit: type=1326 audit(1720492245.971:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 976.051506][ T29] audit: type=1326 audit(1720492246.011:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 976.051570][ T29] audit: type=1326 audit(1720492246.011:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4083" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 976.097583][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.168248][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.168278][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.168293][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.168311][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.168326][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 976.168342][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.179163][T19667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.249617][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249650][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249664][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249681][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249695][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249712][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249729][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249746][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249762][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249780][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249794][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249811][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249827][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249845][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249861][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249878][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249894][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249911][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.249927][T19667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 976.249945][T19667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 976.252190][T19667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.376609][T19667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.376657][T19667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.376690][T19667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.376723][T19667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.508377][ T5147] usb 1-1: USB disconnect, device number 53 [ 976.755521][T18904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.755552][T18904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.862226][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.862255][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.200939][ T5151] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 977.521002][ T5151] usb 4-1: Using ep0 maxpacket: 32 [ 977.557320][ T5151] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 977.592868][ T5151] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 977.622338][ T5151] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.650597][ T5151] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 977.659744][ T5151] usb 4-1: config 1 has no interface number 0 [ 977.680638][ T5151] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 977.710496][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.775295][ T5151] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 978.022656][ T5151] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 978.047251][ T5151] snd_usb_pod 4-1:1.1: invalid control EP [ 978.061719][ T5151] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 978.089037][ T5151] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 978.113753][T14726] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 978.120000][ T5151] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 978.321655][T14726] usb 2-1: Using ep0 maxpacket: 16 [ 978.337962][T14726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 978.390369][T14726] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 978.416006][T14726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.441277][T14726] usb 2-1: config 0 descriptor?? [ 978.760815][T16239] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 978.901199][T20022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.938806][T20022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.961539][T16239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.000575][T16239] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 979.033450][T14726] hid (null): unknown global tag 0xd [ 979.040864][T14726] hid (null): unknown global tag 0xe [ 979.047838][T16239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.078220][T16239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 979.082188][T14726] hid-generic 0003:0158:0100.002A: unknown main item tag 0x1 [ 979.100224][T16239] usb 3-1: SerialNumber: syz [ 979.142544][T14726] hid-generic 0003:0158:0100.002A: unexpected long global item [ 979.165271][T14726] hid-generic 0003:0158:0100.002A: probe with driver hid-generic failed with error -22 [ 979.313948][T16074] usb 2-1: USB disconnect, device number 52 [ 979.417112][T20047] IPv4: Oversized IP packet from 127.202.26.0 [ 979.507461][ T5151] usb 4-1: USB disconnect, device number 50 [ 980.466827][T16074] usb 3-1: USB disconnect, device number 47 [ 980.799321][T18912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.968707][T18912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.135964][T18912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.303901][T18912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.586299][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 981.601219][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 981.610621][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 981.659207][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 981.689569][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 981.697817][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 981.733793][T18912] gretap0: left allmulticast mode [ 981.742445][T18912] gretap0: left promiscuous mode [ 981.748582][T18912] bridge0: port 3(gretap0) entered disabled state [ 981.778363][T18912] bridge_slave_1: left allmulticast mode [ 981.806399][T18912] bridge_slave_1: left promiscuous mode [ 981.818027][T18912] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.861560][T18912] bridge_slave_0: left allmulticast mode [ 981.881452][T18912] bridge_slave_0: left promiscuous mode [ 981.890464][T18912] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.024246][T20107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 982.084996][T20107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.178862][T16170] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 983.222010][T18912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.277121][T18912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.304840][T18912] bond0 (unregistering): Released all slaves [ 983.360772][T16170] usb 1-1: Using ep0 maxpacket: 16 [ 983.381239][T16170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 983.422779][T16170] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 983.464205][T16170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.485602][T18912] tipc: Left network mode [ 983.522666][T16170] usb 1-1: config 0 descriptor?? [ 983.790928][ T5105] Bluetooth: hci0: command tx timeout [ 983.966633][T20122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.976416][T20122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.995762][T16170] hid (null): unknown global tag 0xd [ 984.001841][T16170] hid (null): unknown global tag 0xe [ 984.031661][T16170] hid-generic 0003:0158:0100.002B: unknown main item tag 0x1 [ 984.042408][T16170] hid-generic 0003:0158:0100.002B: unexpected long global item [ 984.052365][T16170] hid-generic 0003:0158:0100.002B: probe with driver hid-generic failed with error -22 [ 984.106524][T18912] hsr_slave_0: left promiscuous mode [ 984.156036][T18912] hsr_slave_1: left promiscuous mode [ 984.242347][T18912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.249919][T18912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.264180][T16170] usb 1-1: USB disconnect, device number 54 [ 984.303031][T18912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.332174][T18912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.417651][T18912] veth1_macvtap: left promiscuous mode [ 984.423990][T18912] veth0_macvtap: left promiscuous mode [ 984.429720][T18912] veth1_vlan: left promiscuous mode [ 984.437459][T18912] veth0_vlan: left promiscuous mode [ 984.500853][ T5147] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 984.702507][ T5147] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.714861][ T5147] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 984.731306][ T5147] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 984.758887][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 984.768979][ T5147] usb 2-1: SerialNumber: syz [ 985.025907][T20146] IPv4: Oversized IP packet from 127.202.26.0 [ 985.418666][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 985.418695][ T29] audit: type=1326 audit(1720492255.781:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.510523][ T29] audit: type=1326 audit(1720492255.801:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.551992][ T29] audit: type=1326 audit(1720492255.881:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.580604][T16170] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 985.600589][ T29] audit: type=1326 audit(1720492255.881:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.640583][ T29] audit: type=1326 audit(1720492255.881:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.680529][ T29] audit: type=1326 audit(1720492255.931:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.720492][ T29] audit: type=1326 audit(1720492255.931:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.779943][ T29] audit: type=1326 audit(1720492255.931:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.811347][T16170] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 985.821117][ T29] audit: type=1326 audit(1720492255.941:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.867741][ T29] audit: type=1326 audit(1720492255.941:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20144 comm="syz.1.4136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x7ffc0000 [ 985.896889][T16170] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 5.86 [ 985.900446][ T5105] Bluetooth: hci0: command tx timeout [ 985.910659][T16170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.946129][T16170] usb 4-1: Product: syz [ 985.950332][T16170] usb 4-1: Manufacturer: syz [ 985.961297][T16170] usb 4-1: SerialNumber: syz [ 985.999674][T16170] usb 4-1: config 0 descriptor?? [ 986.019077][T16170] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 986.060869][T10515] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 986.184629][T18912] team0 (unregistering): Port device team_slave_1 removed [ 986.223062][T16170] usb 2-1: USB disconnect, device number 53 [ 986.267079][T10515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 986.321773][T10515] usb 1-1: string descriptor 0 read error: -22 [ 986.328583][T10515] usb 1-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 986.350905][T10515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.374430][T18912] team0 (unregistering): Port device team_slave_0 removed [ 986.375575][T10515] usb 1-1: config 0 descriptor?? [ 986.398022][T20169] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 986.412177][T10515] r8712u: register rtl8712_netdev_ops to netdev_ops [ 986.429613][T10515] usb 1-1: r8712u: USB_SPEED_LOW with 1 endpoints [ 986.641049][T10515] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 986.650564][T10515] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 986.668397][T10515] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 986.709892][T10515] usb 1-1: USB disconnect, device number 55 [ 987.765329][T16239] usb 4-1: USB disconnect, device number 51 [ 987.801212][T16239] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 987.951854][ T5105] Bluetooth: hci0: command tx timeout [ 988.009258][T20104] chnl_net:caif_netlink_parms(): no params data found [ 988.445122][T20104] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.490874][T20104] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.508677][T20104] bridge_slave_0: entered allmulticast mode [ 988.555195][T20104] bridge_slave_0: entered promiscuous mode [ 988.608358][T20104] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.634151][T20104] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.651327][T20104] bridge_slave_1: entered allmulticast mode [ 988.667657][T20104] bridge_slave_1: entered promiscuous mode [ 988.876521][T20104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.896097][T20104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.117314][T20207] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 989.151648][T20207] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 989.217258][T20104] team0: Port device team_slave_0 added [ 989.317709][T20104] team0: Port device team_slave_1 added [ 989.327803][T20207] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 989.350716][T20207] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 989.383890][T20226] netlink: 'syz.0.4153': attribute type 4 has an invalid length. [ 989.488968][T20104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.509799][T20104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.539990][T20104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.591470][T20207] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 989.597472][T20207] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 989.621827][T20104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.650499][T20104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.710834][T20207] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 989.716818][T20207] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 989.727773][T20104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.972747][T20104] hsr_slave_0: entered promiscuous mode [ 989.986807][T20104] hsr_slave_1: entered promiscuous mode [ 990.009495][T20104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.030536][ T5105] Bluetooth: hci0: command tx timeout [ 990.037428][T20104] Cannot create hsr debugfs directory [ 990.228167][T20207] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 990.267805][T20207] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 991.543575][T20104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 991.578593][T20104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 991.604860][T20104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 991.646127][T20104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 991.691340][T20280] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4169'. [ 991.896753][T20104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.975691][T20104] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.003593][T16074] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.010987][T16074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.040743][T20291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.063078][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.070264][T16074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.119899][T20291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.328037][T20104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.547407][T20104] veth0_vlan: entered promiscuous mode [ 992.576850][T20301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 992.597251][T20104] veth1_vlan: entered promiscuous mode [ 992.749866][T20104] veth0_macvtap: entered promiscuous mode [ 992.797727][T20104] veth1_macvtap: entered promiscuous mode [ 992.871527][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.893715][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.919254][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.940461][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.960447][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.983017][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.004321][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.029828][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.050315][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.071346][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.090457][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.110461][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.133182][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.153526][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.173916][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.195229][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.218491][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.234378][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.254671][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.280573][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.306202][T20104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.325098][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.335728][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.378656][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.425734][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.448213][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.459017][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.472635][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.484930][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.491385][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.499431][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.520452][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.551407][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.569156][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.583879][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.594337][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.605828][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.616331][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.627505][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.638499][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.656171][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.670645][T20104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.694531][T20104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.717031][T20104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.844105][T16074] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 993.895211][T20104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.904824][T20104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.914375][T20104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.926321][T20104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.060715][T16074] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.071319][T16074] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 994.089380][T16074] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.128736][T16074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 994.143402][T16074] usb 1-1: SerialNumber: syz [ 994.438948][T20333] IPv4: Oversized IP packet from 127.202.26.0 [ 994.518512][ T2469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.739927][ T2469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.831379][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 994.831403][ T29] audit: type=1326 audit(1720492265.191:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.0.4180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 994.880907][ T29] audit: type=1326 audit(1720492265.191:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.0.4180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 994.932742][ T29] audit: type=1326 audit(1720492265.201:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.0.4180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 994.933875][ T2469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.017196][ T29] audit: type=1326 audit(1720492265.201:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.0.4180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 995.057024][ T29] audit: type=1326 audit(1720492265.201:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.0.4180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 995.106966][ T29] audit: type=1326 audit(1720492265.381:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20331 comm="syz.0.4180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ec579 code=0x7ffc0000 [ 995.108446][ T2469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.350576][ T2469] gretap0: left allmulticast mode [ 995.355799][ T2469] gretap0: left promiscuous mode [ 995.363134][ T2469] bridge0: port 3(gretap0) entered disabled state [ 995.375608][ T2469] bridge_slave_1: left allmulticast mode [ 995.383671][ T2469] bridge_slave_1: left promiscuous mode [ 995.396082][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.417207][ T2469] bridge_slave_0: left allmulticast mode [ 995.423287][ T2469] bridge_slave_0: left promiscuous mode [ 995.434951][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.199947][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.216443][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.228638][ T2469] bond0 (unregistering): Released all slaves [ 1054.924925][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.931602][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.358069][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.364597][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 1138.750664][ T30] INFO: task kworker/1:3:5151 blocked for more than 143 seconds. [ 1138.758513][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1138.766314][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1138.776118][ T30] task:kworker/1:3 state:D stack:21016 pid:5151 tgid:5151 ppid:2 flags:0x00004000 [ 1138.786403][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1138.793249][ T30] Call Trace: [ 1138.796566][ T30] [ 1138.799534][ T30] __schedule+0x17e8/0x4a20 [ 1138.804186][ T30] ? __pfx___schedule+0x10/0x10 [ 1138.809091][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1138.815188][ T30] ? __pfx_lock_release+0x10/0x10 [ 1138.820413][ T30] ? kick_pool+0x1bd/0x620 [ 1138.824877][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1138.830130][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1138.836287][ T30] ? schedule+0x90/0x320 [ 1138.840651][ T30] schedule+0x14b/0x320 [ 1138.844850][ T30] schedule_preempt_disabled+0x13/0x30 [ 1138.850428][ T30] __mutex_lock+0x6a4/0xd70 [ 1138.854986][ T30] ? __mutex_lock+0x527/0xd70 [ 1138.859715][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1138.866183][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1138.871622][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1138.877745][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1138.885276][ T30] ? process_scheduled_works+0x945/0x1830 [ 1138.891360][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1138.898031][ T30] ? process_scheduled_works+0x945/0x1830 [ 1138.904006][ T30] process_scheduled_works+0xa2c/0x1830 [ 1138.909611][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1138.915933][ T30] ? assign_work+0x364/0x3d0 [ 1138.920674][ T30] worker_thread+0x86d/0xd50 [ 1138.925669][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1138.931724][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1138.936918][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1138.942116][ T30] kthread+0x2f0/0x390 [ 1138.946284][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1138.951577][ T30] ? __pfx_kthread+0x10/0x10 [ 1138.956249][ T30] ret_from_fork+0x4b/0x80 [ 1138.960773][ T30] ? __pfx_kthread+0x10/0x10 [ 1138.965422][ T30] ret_from_fork_asm+0x1a/0x30 [ 1138.970452][ T30] [ 1138.973530][ T30] INFO: task syz-executor:18470 blocked for more than 143 seconds. [ 1138.981563][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1138.989228][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1138.998569][ T30] task:syz-executor state:D stack:24640 pid:18470 tgid:18470 ppid:5084 flags:0x20004002 [ 1139.009098][ T30] Call Trace: [ 1139.012625][ T30] [ 1139.015591][ T30] __schedule+0x17e8/0x4a20 [ 1139.020155][ T30] ? __pfx___schedule+0x10/0x10 [ 1139.025249][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.030418][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1139.035967][ T30] ? schedule+0x90/0x320 [ 1139.040248][ T30] schedule+0x14b/0x320 [ 1139.044553][ T30] schedule_preempt_disabled+0x13/0x30 [ 1139.050145][ T30] __mutex_lock+0x6a4/0xd70 [ 1139.055364][ T30] ? kobject_put+0x443/0x480 [ 1139.060127][ T30] ? __mutex_lock+0x527/0xd70 [ 1139.065251][ T30] ? rfkill_unregister+0xd0/0x230 [ 1139.070737][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1139.075811][ T30] ? __pfx_device_del+0x10/0x10 [ 1139.081209][ T30] ? hci_sock_dev_event+0x2eb/0x5f0 [ 1139.086505][ T30] rfkill_unregister+0xd0/0x230 [ 1139.091460][ T30] hci_unregister_dev+0x366/0x510 [ 1139.096561][ T30] vhci_release+0x83/0xd0 [ 1139.102053][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1139.107290][ T30] __fput+0x24a/0x8a0 [ 1139.111428][ T30] task_work_run+0x24f/0x310 [ 1139.116082][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1139.121332][ T30] ? switch_task_namespaces+0xe1/0x110 [ 1139.126833][ T30] do_exit+0xa27/0x27e0 [ 1139.131114][ T30] ? __pfx_do_exit+0x10/0x10 [ 1139.135760][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1139.141886][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1139.148345][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1139.153806][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1139.159594][ T30] do_group_exit+0x207/0x2c0 [ 1139.164411][ T30] __ia32_sys_exit_group+0x3f/0x40 [ 1139.169587][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1139.174801][ T30] ? exc_page_fault+0x590/0x8c0 [ 1139.179709][ T30] do_fast_syscall_32+0x34/0x80 [ 1139.184723][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.191199][ T30] RIP: 0023:0xf7431579 [ 1139.195311][ T30] RSP: 002b:00000000fff7005c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc [ 1139.207639][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000004 [ 1139.216504][ T30] RDX: 0000000000000000 RSI: 00000000f717d890 RDI: 00000000f7583fc0 [ 1139.224787][ T30] RBP: 0000000030000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.233069][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1139.241210][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.249330][ T30] [ 1139.252803][ T30] INFO: task syz-executor:20104 blocked for more than 143 seconds. [ 1139.260813][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1139.268510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.278011][ T30] task:syz-executor state:D stack:20000 pid:20104 tgid:20104 ppid:20088 flags:0x20000000 [ 1139.289624][ T30] Call Trace: [ 1139.293039][ T30] [ 1139.296008][ T30] __schedule+0x17e8/0x4a20 [ 1139.302917][ T30] ? __pfx___schedule+0x10/0x10 [ 1139.307845][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.314225][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1139.319886][ T30] ? schedule+0x90/0x320 [ 1139.324673][ T30] schedule+0x14b/0x320 [ 1139.328883][ T30] schedule_preempt_disabled+0x13/0x30 [ 1139.334545][ T30] __mutex_lock+0x6a4/0xd70 [ 1139.339261][ T30] ? __mutex_lock+0x527/0xd70 [ 1139.344097][ T30] ? rfkill_fop_open+0x131/0x850 [ 1139.349154][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1139.354329][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1139.359737][ T30] rfkill_fop_open+0x131/0x850 [ 1139.364634][ T30] ? module_put+0x13a/0x2d0 [ 1139.369184][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1139.374597][ T30] misc_open+0x313/0x390 [ 1139.378947][ T30] chrdev_open+0x5b0/0x630 [ 1139.383491][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1139.388576][ T30] ? security_file_open+0x51a/0x750 [ 1139.396410][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1139.401558][ T30] do_dentry_open+0x970/0x1450 [ 1139.406431][ T30] vfs_open+0x3e/0x330 [ 1139.412863][ T30] path_openat+0x2c01/0x35f0 [ 1139.417523][ T30] ? mark_lock+0x9a/0x350 [ 1139.422208][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1139.427286][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1139.432487][ T30] ? __pfx_path_openat+0x10/0x10 [ 1139.437583][ T30] do_filp_open+0x235/0x490 [ 1139.442295][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1139.447559][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1139.452583][ T30] ? alloc_fd+0x5a1/0x640 [ 1139.456974][ T30] do_sys_openat2+0x13e/0x1d0 [ 1139.461785][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1139.467034][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1139.473209][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1139.478810][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1139.485107][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1139.491981][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1139.497245][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1139.504529][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1139.510929][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1139.516222][ T30] do_fast_syscall_32+0x34/0x80 [ 1139.523381][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.529761][ T30] RIP: 0023:0xf741f579 [ 1139.533988][ T30] RSP: 002b:00000000f7571ec0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1139.542539][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7309a95 [ 1139.551038][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f740aff4 [ 1139.559338][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1139.567448][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1139.575578][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.583672][ T30] [ 1139.586735][ T30] INFO: task syz.1.4149:20191 blocked for more than 144 seconds. [ 1139.594585][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1139.602331][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.613139][ T30] task:syz.1.4149 state:D stack:24640 pid:20191 tgid:20191 ppid:19648 flags:0x20004004 [ 1139.623497][ T30] Call Trace: [ 1139.626797][ T30] [ 1139.629751][ T30] __schedule+0x17e8/0x4a20 [ 1139.636068][ T30] ? __pfx___schedule+0x10/0x10 [ 1139.641647][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.646734][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1139.652342][ T30] ? schedule+0x90/0x320 [ 1139.656622][ T30] schedule+0x14b/0x320 [ 1139.661905][ T30] schedule_preempt_disabled+0x13/0x30 [ 1139.667418][ T30] __mutex_lock+0x6a4/0xd70 [ 1139.672031][ T30] ? kobject_put+0x443/0x480 [ 1139.676806][ T30] ? __mutex_lock+0x527/0xd70 [ 1139.681625][ T30] ? rfkill_unregister+0xd0/0x230 [ 1139.686701][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1139.691813][ T30] ? __pfx_device_del+0x10/0x10 [ 1139.696805][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 1139.703106][ T30] rfkill_unregister+0xd0/0x230 [ 1139.708007][ T30] nfc_unregister_device+0x96/0x2a0 [ 1139.713950][ T30] virtual_ncidev_close+0x59/0x90 [ 1139.719041][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1139.724905][ T30] __fput+0x24a/0x8a0 [ 1139.728930][ T30] task_work_run+0x24f/0x310 [ 1139.733645][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1139.738803][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1139.744687][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 1139.750553][ T30] __do_fast_syscall_32+0xc4/0x120 [ 1139.755755][ T30] ? exc_page_fault+0x590/0x8c0 [ 1139.760851][ T30] do_fast_syscall_32+0x34/0x80 [ 1139.765758][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.773210][ T30] RIP: 0023:0xf7427579 [ 1139.777332][ T30] RSP: 002b:00000000f7579aac EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1139.785943][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1139.794125][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.802196][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.810242][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1139.818418][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.826528][ T30] [ 1139.829577][ T30] INFO: task syz.2.4152:20207 blocked for more than 144 seconds. [ 1139.837482][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1139.845546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.854421][ T30] task:syz.2.4152 state:D stack:23952 pid:20207 tgid:20206 ppid:19667 flags:0x20004006 [ 1139.864787][ T30] Call Trace: [ 1139.868100][ T30] [ 1139.871162][ T30] __schedule+0x17e8/0x4a20 [ 1139.875777][ T30] ? __pfx___schedule+0x10/0x10 [ 1139.881732][ T30] ? __pfx_lock_release+0x10/0x10 [ 1139.886828][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1139.892518][ T30] ? schedule+0x90/0x320 [ 1139.896799][ T30] schedule+0x14b/0x320 [ 1139.901105][ T30] schedule_preempt_disabled+0x13/0x30 [ 1139.906697][ T30] __mutex_lock+0x6a4/0xd70 [ 1139.911308][ T30] ? __mutex_lock+0x527/0xd70 [ 1139.916035][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 1139.921622][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1139.926886][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1139.932466][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1139.938589][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1139.946480][ T30] nfc_rfkill_set_block+0x50/0x310 [ 1139.951902][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1139.957690][ T30] rfkill_set_block+0x1f1/0x440 [ 1139.962717][ T30] rfkill_fop_write+0x5bb/0x790 [ 1139.967738][ T30] ? common_file_perm+0x1a6/0x210 [ 1139.972859][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1139.978263][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 1139.983739][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 1139.988631][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1139.995111][ T30] vfs_write+0x2a2/0xc90 [ 1139.999411][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1140.004253][ T30] ? do_futex+0x392/0x560 [ 1140.008740][ T30] ? __fget_files+0x29/0x470 [ 1140.013490][ T30] ? __fget_files+0x3f6/0x470 [ 1140.018220][ T30] ? __fget_files+0x29/0x470 [ 1140.022912][ T30] ksys_write+0x1a0/0x2c0 [ 1140.027299][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1140.038585][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1140.045842][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1140.053520][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1140.058708][ T30] ? exc_page_fault+0x590/0x8c0 [ 1140.063675][ T30] do_fast_syscall_32+0x34/0x80 [ 1140.068571][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1140.075239][ T30] RIP: 0023:0xf73e4579 [ 1140.079397][ T30] RSP: 002b:00000000f5cfd57c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1140.089989][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200004c0 [ 1140.098164][ T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 1140.106344][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.115405][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1140.123537][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.131664][ T30] [ 1140.134729][ T30] INFO: task syz.0.4180:20350 blocked for more than 144 seconds. [ 1140.142638][ T30] Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1140.150471][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1140.159352][ T30] task:syz.0.4180 state:D stack:25552 pid:20350 tgid:20331 ppid:19027 flags:0x20000004 [ 1140.170228][ T30] Call Trace: [ 1140.174008][ T30] [ 1140.177086][ T30] __schedule+0x17e8/0x4a20 [ 1140.181762][ T30] ? __pfx___schedule+0x10/0x10 [ 1140.186671][ T30] ? __pfx_lock_release+0x10/0x10 [ 1140.192531][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1140.198200][ T30] ? schedule+0x90/0x320 [ 1140.202839][ T30] schedule+0x14b/0x320 [ 1140.207313][ T30] schedule_preempt_disabled+0x13/0x30 [ 1140.213135][ T30] __mutex_lock+0x6a4/0xd70 [ 1140.217796][ T30] ? __mutex_lock+0x527/0xd70 [ 1140.223829][ T30] ? misc_open+0x5c/0x390 [ 1140.228248][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1140.233639][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1140.239350][ T30] misc_open+0x5c/0x390 [ 1140.243880][ T30] chrdev_open+0x5b0/0x630 [ 1140.248465][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1140.253790][ T30] ? security_file_open+0x51a/0x750 [ 1140.259045][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1140.264457][ T30] do_dentry_open+0x970/0x1450 [ 1140.269439][ T30] vfs_open+0x3e/0x330 [ 1140.274009][ T30] path_openat+0x2c01/0x35f0 [ 1140.278790][ T30] ? mark_lock+0x9a/0x350 [ 1140.283509][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1140.288613][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1140.293983][ T30] ? __pfx_path_openat+0x10/0x10 [ 1140.298991][ T30] do_filp_open+0x235/0x490 [ 1140.305306][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1140.310614][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1140.315537][ T30] ? alloc_fd+0x5a1/0x640 [ 1140.319920][ T30] do_sys_openat2+0x13e/0x1d0 [ 1140.325095][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1140.331491][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1140.337098][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1140.343288][ T30] ? __secure_computing+0x125/0x370 [ 1140.348570][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1140.354620][ T30] ? exc_page_fault+0x590/0x8c0 [ 1140.359762][ T30] do_fast_syscall_32+0x34/0x80 [ 1140.364762][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1140.371211][ T30] RIP: 0023:0xf73ec579 [ 1140.375339][ T30] RSP: 002b:00000000f5ce457c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1140.383945][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000140 [ 1140.392136][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1140.400181][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1140.408322][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1140.416523][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1140.424842][ T30] [ 1140.428034][ T30] [ 1140.428034][ T30] Showing all locks held in the system: [ 1140.436716][ T30] 1 lock held by khungtaskd/30: [ 1140.444050][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1140.454278][ T30] 4 locks held by kworker/u8:10/2469: [ 1140.459703][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1140.471021][ T30] #1: ffffc90009837d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1140.481759][ T30] #2: ffffffff8f5da590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1140.491377][ T30] #3: ffffffff8f8bb5e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1140.501663][ T30] 2 locks held by getty/4850: [ 1140.506380][ T30] #0: ffff88802a1860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1140.516383][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1140.526647][ T30] 3 locks held by kworker/1:3/5151: [ 1140.532060][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1140.543222][ T30] #1: ffffc90003b8fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1140.557260][ T30] #2: ffffffff8f8bb5e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1140.569502][ T30] 1 lock held by syz-executor/18470: [ 1140.575417][ T30] #0: ffffffff8f8bb5e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1140.585684][ T30] 2 locks held by syz-executor/20104: [ 1140.591216][ T30] #0: ffffffff8eb2f648 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1140.599816][ T30] #1: ffffffff8f8bb5e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 1140.610046][ T30] 2 locks held by syz.1.4149/20191: [ 1140.615397][ T30] #0: ffff8880667af100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 1140.627237][ T30] #1: ffffffff8f8bb5e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1140.637736][ T30] 2 locks held by syz.2.4152/20207: [ 1140.644328][ T30] #0: ffffffff8f8bb5e8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 1140.654877][ T30] #1: ffff8880667af100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 1140.664993][ T30] 1 lock held by syz.0.4180/20350: [ 1140.670139][ T30] #0: ffffffff8eb2f648 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1140.680731][ T30] [ 1140.683106][ T30] ============================================= [ 1140.683106][ T30] [ 1140.691598][ T30] NMI backtrace for cpu 0 [ 1140.695964][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1140.705969][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1140.716047][ T30] Call Trace: [ 1140.719527][ T30] [ 1140.722489][ T30] dump_stack_lvl+0x241/0x360 [ 1140.727286][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.732509][ T30] ? __pfx__printk+0x10/0x10 [ 1140.737111][ T30] ? vprintk_emit+0x631/0x770 [ 1140.741804][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1140.746876][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1140.751844][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1140.757312][ T30] ? _printk+0xd5/0x120 [ 1140.761572][ T30] ? __pfx__printk+0x10/0x10 [ 1140.766181][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1140.771071][ T30] ? __pfx__printk+0x10/0x10 [ 1140.775704][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1140.780776][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1140.786786][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1140.792815][ T30] watchdog+0xfde/0x1020 [ 1140.797078][ T30] ? watchdog+0x1ea/0x1020 [ 1140.801515][ T30] ? __pfx_watchdog+0x10/0x10 [ 1140.806201][ T30] kthread+0x2f0/0x390 [ 1140.810283][ T30] ? __pfx_watchdog+0x10/0x10 [ 1140.814985][ T30] ? __pfx_kthread+0x10/0x10 [ 1140.819594][ T30] ret_from_fork+0x4b/0x80 [ 1140.824030][ T30] ? __pfx_kthread+0x10/0x10 [ 1140.828645][ T30] ret_from_fork_asm+0x1a/0x30 [ 1140.833444][ T30] [ 1140.836887][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1140.842195][ C1] NMI backtrace for cpu 1 [ 1140.842210][ C1] CPU: 1 PID: 16239 Comm: kworker/1:4 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1140.842231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1140.842243][ C1] Workqueue: events nsim_dev_trap_report_work [ 1140.842275][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x8c/0x120 [ 1140.842300][ C1] Code: 00 00 00 4d 85 d2 75 14 e9 9a 00 00 00 41 b8 05 00 00 00 4d 85 d2 0f 84 8b 00 00 00 4c 8b 4c 24 20 65 4c 8b 1c 25 c0 d4 03 00 <31> d2 eb 08 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 f4 a6 [ 1140.842316][ C1] RSP: 0018:ffffc90004e8f4c0 EFLAGS: 00000202 [ 1140.842332][ C1] RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffff88802586da00 [ 1140.842345][ C1] RDX: ffffc90004e8f5f5 RSI: ffffffff8e1a1380 RDI: 0000000000000004 [ 1140.842359][ C1] RBP: 0000000000000004 R08: 0000000000000005 R09: ffffffff8140f7ae [ 1140.842371][ C1] R10: 0000000000000008 R11: ffff88802586da00 R12: ffffffff8fbe5fa0 [ 1140.842384][ C1] R13: dffffc0000000000 R14: ffffc90004e8f610 R15: 1ffff920009d1eb8 [ 1140.842399][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1140.842415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.842429][ C1] CR2: 0000560f58b922e8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1140.842446][ C1] Call Trace: [ 1140.842454][ C1] [ 1140.842462][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1140.842483][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1140.842505][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1140.842524][ C1] ? nmi_handle+0x2a/0x5a0 [ 1140.842561][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1140.842582][ C1] ? nmi_handle+0x14f/0x5a0 [ 1140.842609][ C1] ? nmi_handle+0x2a/0x5a0 [ 1140.842637][ C1] ? __sanitizer_cov_trace_switch+0x8c/0x120 [ 1140.842657][ C1] ? default_do_nmi+0x63/0x160 [ 1140.842678][ C1] ? exc_nmi+0x123/0x1f0 [ 1140.842696][ C1] ? end_repeat_nmi+0xf/0x53 [ 1140.842727][ C1] ? unwind_next_frame+0x7be/0x2a00 [ 1140.842755][ C1] ? __sanitizer_cov_trace_switch+0x8c/0x120 [ 1140.842776][ C1] ? __sanitizer_cov_trace_switch+0x8c/0x120 [ 1140.842798][ C1] ? __sanitizer_cov_trace_switch+0x8c/0x120 [ 1140.842818][ C1] [ 1140.842825][ C1] [ 1140.842833][ C1] unwind_next_frame+0x7be/0x2a00 [ 1140.842864][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 1140.842883][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 1140.842902][ C1] ? __kernel_text_address+0xd/0x40 [ 1140.842926][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 1140.842944][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1140.842974][ C1] arch_stack_walk+0x151/0x1b0 [ 1140.843006][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 1140.843027][ C1] stack_trace_save+0x118/0x1d0 [ 1140.843063][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1140.843093][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1140.843126][ C1] kasan_save_track+0x3f/0x80 [ 1140.843146][ C1] ? kasan_save_track+0x3f/0x80 [ 1140.843165][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 1140.843186][ C1] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 1140.843214][ C1] ? __alloc_skb+0x1c3/0x440 [ 1140.843233][ C1] ? nsim_dev_trap_report_work+0x254/0xaa0 [ 1140.843258][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 1140.843303][ C1] ? mark_lock+0x9a/0x350 [ 1140.843325][ C1] __kasan_slab_alloc+0x66/0x80 [ 1140.843346][ C1] ? __alloc_skb+0x1c3/0x440 [ 1140.843365][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 1140.843397][ C1] __alloc_skb+0x1c3/0x440 [ 1140.843421][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1140.843442][ C1] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 1140.843468][ C1] ? kmem_cache_free+0x145/0x350 [ 1140.843498][ C1] nsim_dev_trap_report_work+0x254/0xaa0 [ 1140.843534][ C1] ? process_scheduled_works+0x945/0x1830 [ 1140.843553][ C1] process_scheduled_works+0xa2c/0x1830 [ 1140.843588][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1140.843612][ C1] ? assign_work+0x364/0x3d0 [ 1140.843633][ C1] worker_thread+0x86d/0xd50 [ 1140.843659][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1140.843680][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1140.843702][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1140.843722][ C1] kthread+0x2f0/0x390 [ 1140.843745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1140.843764][ C1] ? __pfx_kthread+0x10/0x10 [ 1140.843787][ C1] ret_from_fork+0x4b/0x80 [ 1140.843811][ C1] ? __pfx_kthread+0x10/0x10 [ 1140.843833][ C1] ret_from_fork_asm+0x1a/0x30 [ 1140.843868][ C1] [ 1141.294734][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1141.301661][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 1141.311679][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1141.321777][ T30] Call Trace: [ 1141.325086][ T30] [ 1141.328027][ T30] dump_stack_lvl+0x241/0x360 [ 1141.332736][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1141.337956][ T30] ? __pfx__printk+0x10/0x10 [ 1141.342561][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1141.348558][ T30] ? vscnprintf+0x5d/0x90 [ 1141.352904][ T30] panic+0x349/0x860 [ 1141.356821][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1141.362992][ T30] ? __pfx_panic+0x10/0x10 [ 1141.367422][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1141.372921][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1141.378567][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1141.383975][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1141.390169][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1141.396352][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1141.402546][ T30] watchdog+0x101d/0x1020 [ 1141.406938][ T30] ? watchdog+0x1ea/0x1020 [ 1141.411378][ T30] ? __pfx_watchdog+0x10/0x10 [ 1141.416068][ T30] kthread+0x2f0/0x390 [ 1141.420152][ T30] ? __pfx_watchdog+0x10/0x10 [ 1141.424889][ T30] ? __pfx_kthread+0x10/0x10 [ 1141.429508][ T30] ret_from_fork+0x4b/0x80 [ 1141.433948][ T30] ? __pfx_kthread+0x10/0x10 [ 1141.438559][ T30] ret_from_fork_asm+0x1a/0x30 [ 1141.443354][ T30] [ 1141.446659][ T30] Kernel Offset: disabled [ 1141.450999][ T30] Rebooting in 86400 seconds..