last executing test programs: 33.541244028s ago: executing program 0 (id=503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400062c08001a80040004"], 0x1c}, 0x1, 0x3000000}, 0x0) 20.926006137s ago: executing program 0 (id=505): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, &(0x7f0000000440)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a680fbe326b997c1f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe90000000000000000620601000000e5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084c", 0xb8) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000300)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000002c0)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x7}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000380)={0x0, 0x36}, 0x0, 0x0}) 19.329069659s ago: executing program 3 (id=542): r0 = socket(0x400000000010, 0x3, 0x0) msgget$private(0x0, 0x8d) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x84601) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x90, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="a3972ccb0a7d7b0ee0f6c13f0e1a5aa28fb26cdb8d215334aa5183d5415d5b131ba736acdcef58642d43e1940c1d77c2fb76c849b94a2c73e1d2ee5a7fa7a9c2cb433da37bfaff0c72d186df5ad51cd007297750247d17cbd840797b687287abaa4bd1325d812258462ed4d9b154c735db4fb0522c895258a104c7573a5ef3d25ad27bd9fc028c9c276b89ae9955dadd", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0xc040) getpeername(r2, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) io_pgetevents(0x0, 0x5, 0x8, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={r3, r4+60000000}, &(0x7f0000000600)={&(0x7f0000000480), 0x8}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x0, &(0x7f0000000100)}) rseq(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x849d, 0x1, 0x3, 0x7cd07b76}, {0x1915, 0x20, 0x5, 0x9}, {0x7fff, 0xc5, 0x6, 0x2}, {0x3, 0x5, 0xf9, 0xffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, 0x0}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', './file0'}, 0x1f7000) 18.399432667s ago: executing program 3 (id=546): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x0, 0x10, 0x0, 0x1fc}]}) r4 = msgget$private(0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x0, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0x0, @loopback, 0x1}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_virt_wifi\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14705ec06abadf6ff7ac5d88d0498fab9ce9db018caf6a626e239b28b6470866c69014160bf66da4f20af0dfd6103bb983d15a059a47f975e3dfe8671215c92136890048058788040c901ec0d1ee9d75440679e9c766c86490310288fd920a84a4e3cef5c7bbc7c6a29c3ebd3b8712360ed146c69f2e934804", @ANYRES16=r9, @ANYRESOCT=r0, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/657], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a000100000000000000000002"], 0x30}}, 0x0) pipe2(&(0x7f00000000c0), 0x0) 17.588867158s ago: executing program 4 (id=551): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x0, 0x0, 0x0, "f759e10000001000000000fc6300", "00000100", "81001a7a", "e859ad13", ["8bada940edff000a00", "ffffff004000", "200000001a00", "0000000000000000000100"]}) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000440)=""/154, 0x9a) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000200)=""/128, 0x80) syz_usb_disconnect(r1) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0xc0189436, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = dup(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000017a8bb500"], 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800008504"]) 17.569288684s ago: executing program 0 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000180)=0x100003, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0xe0ffffff, @loopback}, 0x1c) 17.40798331s ago: executing program 3 (id=553): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a908001d03f3a26c2790100", 0x0, 0x960000}) 17.360426504s ago: executing program 3 (id=554): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r0, &(0x7f00000001c0)="d2", 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) syz_io_uring_setup(0x400fe5, 0x0, &(0x7f0000000140), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getpid() bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0)=0x7a, 0x3) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r5, &(0x7f0000001340)=ANY=[], 0xa89) 17.332780386s ago: executing program 0 (id=555): r0 = epoll_create1(0x0) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x571800) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) read$FUSE(r2, &(0x7f0000001a80)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000440)={0x20002017}) 17.131881885s ago: executing program 0 (id=556): r0 = socket$inet6(0xa, 0x2, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8940) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) memfd_create(&(0x7f0000000440)='\xc0\x87:*\x18\xc1k\xad\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x00\x00\x00\x00\xe2\xce:\xb5\xb7\xc4\xde\xae\xb6\x1c\xbf\xa2\x12\xa5\x18\xba[\xc7%\x88 \xeeQR\x9f\xa2\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\b6\x86\xc8\xe9/\x19w4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe7\x8d.\xd1\x00\x01\x00\x00\x00\x00\x00\x00\x1d\xe7_\xde\x87\xdd\xc1\x15\x0e\x00\x00\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\b\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\x05\x00\x00\x00\x84\xf4\"\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xc7\x10\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v(\xb9\xf1\a\x85\xe6\x882\xaa\x83\xb7*}\x042\xc6\xf9\xbe\xfeI\x8b\xd4/`\xabh~\xcb\xb9j\xa1\xfc\xcb\xfd\x8a\x1eW\x87\x06\xcd\xa0\x91\xacJ\xf5.\x14\xe6\xe8F\xbe\xf8A\x9flx\x0e\xeb\xe9\xac9\x7f\x1aII\xdd\xfc1\fP\x05\x8d#\xec\xeb\x92g~&!\x90J\xd0\xe1\xac\xd4\xd6\xd4\b\x90\xed\xca\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\xaaL\xa8@\xf7h\x04\x9a\xb1\xba\xcdm\x9a\xa8\xfdt\xa7\x17\xd4v9\xafA\xfb\xa3R\xf6\x8c!\xc01\xf8\x17\xd5$\xae\x04\x80M\xdc\xe0\x97IHg5\x8e\x1d=\xaf\xe3 \a=\xe8', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000a80)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r4, 0x2cef, 0x8915, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = open_tree(r7, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x94}}, 0x0) fchdir(r8) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB], 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) clock_getres(0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 16.897776706s ago: executing program 0 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4044041}, 0x4001) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @broadcast}, 0x3, 0x4, 0x1, 0x1}}, 0x26) 14.379837967s ago: executing program 2 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0xffffffff, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 14.317953611s ago: executing program 4 (id=561): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a0000fde10000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140", @ANYRES16, @ANYRES8, @ANYRES32=r0], 0xfdef) 14.095927221s ago: executing program 2 (id=563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote, 0x96}, {@private}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x4, "d1488e69"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 13.66227952s ago: executing program 4 (id=565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "01807100", "be01db9ae0a5fd03"}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0)={[0x10000000]}, 0x8) 13.565168128s ago: executing program 3 (id=566): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 13.564713892s ago: executing program 1 (id=567): r0 = socket$inet6(0xa, 0x2, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8940) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) memfd_create(&(0x7f0000000440)='\xc0\x87:*\x18\xc1k\xad\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x00\x00\x00\x00\xe2\xce:\xb5\xb7\xc4\xde\xae\xb6\x1c\xbf\xa2\x12\xa5\x18\xba[\xc7%\x88 \xeeQR\x9f\xa2\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\b6\x86\xc8\xe9/\x19w4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe7\x8d.\xd1\x00\x01\x00\x00\x00\x00\x00\x00\x1d\xe7_\xde\x87\xdd\xc1\x15\x0e\x00\x00\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\b\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\x05\x00\x00\x00\x84\xf4\"\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xc7\x10\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v(\xb9\xf1\a\x85\xe6\x882\xaa\x83\xb7*}\x042\xc6\xf9\xbe\xfeI\x8b\xd4/`\xabh~\xcb\xb9j\xa1\xfc\xcb\xfd\x8a\x1eW\x87\x06\xcd\xa0\x91\xacJ\xf5.\x14\xe6\xe8F\xbe\xf8A\x9flx\x0e\xeb\xe9\xac9\x7f\x1aII\xdd\xfc1\fP\x05\x8d#\xec\xeb\x92g~&!\x90J\xd0\xe1\xac\xd4\xd6\xd4\b\x90\xed\xca\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\xaaL\xa8@\xf7h\x04\x9a\xb1\xba\xcdm\x9a\xa8\xfdt\xa7\x17\xd4v9\xafA\xfb\xa3R\xf6\x8c!\xc01\xf8\x17\xd5$\xae\x04\x80M\xdc\xe0\x97IHg5\x8e\x1d=\xaf\xe3 \a=\xe8', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000a80)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r4, 0x2cef, 0x8915, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r8 = open_tree(r7, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x94}}, 0x0) fchdir(r8) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB], 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) clock_getres(0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 13.415756233s ago: executing program 4 (id=568): add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x81, 0x0, {0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) close(r2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000040)={0x87, 0xc, 0x2, 0x1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, 0x68) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000bc0)={{0xfc, 0x1}, {0xe}}) preadv(r0, &(0x7f0000000240)=[{&(0x7f000001a980)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 12.459732668s ago: executing program 1 (id=569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000006c0)={0x2020}, 0x2020) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f0000000240)={{0x1}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x6ad) read$FUSE(r3, &(0x7f0000004740)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r8 = getpid() r9 = socket$igmp(0x2, 0x3, 0x2) sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="8520", 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRES32=r8, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="739c1137ab587570f7707e39095d038d42556af759a8afece9770062b95b25e3880dc0983687c829f7b02aaa9275bb88f5117e35"], 0x38}, 0x41) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80000, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000000)={r12, 0x6, 0x30, 0x1, 0x9}, &(0x7f00000000c0)=0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3101}) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x1, 0x3, 0x1}}, 0x26) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 12.394754037s ago: executing program 4 (id=570): r0 = fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) readahead(r0, 0xffffffffffffc114, 0xf) r1 = socket$inet_udp(0x2, 0x2, 0x0) uname(0x0) close(r1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x705, 0x1200, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}]}}}]}, 0x48}, 0x1, 0x4c00000000000000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) 6.063596081s ago: executing program 2 (id=578): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x400, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x758, 0x5a0, 0x120, 0x120, 0x440, 0x5a0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@dst={{0x48}, {0x1eb, 0x3, 0x0, [0x1, 0xd, 0x7, 0x9, 0x0, 0x7f, 0x200, 0x3, 0x1, 0x379, 0x2, 0x7, 0xd, 0x9, 0xc0a0, 0x2], 0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@multicast1, 0x40, 0x13, 0x89f7}}}, {{@uncond, 0x0, 0x160, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x1d, 0x7, 0x3, 0x0, 0x9, @mcast2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 0x104, 0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0xff], 0x4e22, 0x4e22, 0x4e23, 0x4e22, 0x4, 0x200, 0xffff0000, 0xfffffff7}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0xfffffff9, 0x4, 0x1, [0x9, 0x7, 0x7, 0x2, 0x915, 0x6c, 0x9, 0x7, 0xff, 0x7, 0x5fe, 0x6, 0x1, 0x7fff, 0xc, 0x6], 0x6}}, @common=@icmp6={{0x28}, {0xb, "8434"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xb, 0x21, 0x4}}}, {{@ipv6={@remote, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'batadv_slave_1\x00', 'ip6erspan0\x00', {0xff}, {}, 0x2c, 0x0, 0x4, 0x10}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x81, 0x90a, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100000, 0x2c) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x1c, r4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e008d2a000001000000", @ANYBLOB="c1166498"], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 5.499877214s ago: executing program 2 (id=579): add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x81, 0x0, {0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) close(r2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000040)={0x87, 0xc, 0x2, 0x1, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, 0x68) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000bc0)={{0xfc, 0x1}, {0xe}}) preadv(r0, &(0x7f0000000240)=[{&(0x7f000001a980)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 199.188815ms ago: executing program 2 (id=580): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xffef, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c00000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="5b0b000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) 0s ago: executing program 1 (id=582): syz_open_dev$video(0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4fefe06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) kernel console output (not intermixed with test programs): 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.025806][ T5452] usb 1-1: Using ep0 maxpacket: 32 [ 183.057156][ T5452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 183.067758][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.100482][ T5452] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 183.128164][ T5282] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 183.163845][ T5452] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.181051][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.189395][ T5452] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.220107][ T5452] usb 1-1: Product: syz [ 183.263621][ T5452] usb 1-1: Manufacturer: syz [ 183.267649][ T5282] usb 5-1: config 0 descriptor?? [ 183.301993][ T5452] usb 1-1: SerialNumber: syz [ 183.346110][ T5452] usb 1-1: config 0 descriptor?? [ 183.448207][ T5452] usb 2-1: USB disconnect, device number 30 [ 183.607679][ T5242] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.621817][ T5280] usb 1-1: USB disconnect, device number 20 [ 183.781660][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.803845][ T5242] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.805450][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x6 [ 183.834190][ T5242] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.841386][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x5 [ 183.849182][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x4 [ 183.856672][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.863741][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.871096][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.878534][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.885745][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.894060][ T5282] cherry 0003:046A:0027.0004: unknown main item tag 0x0 [ 183.901177][ T5282] cherry 0003:046A:0027.0004: unknown global tag 0xd [ 183.907957][ T5282] cherry 0003:046A:0027.0004: item 0 4 1 13 parsing failed [ 183.915724][ T5282] cherry 0003:046A:0027.0004: probe with driver cherry failed with error -22 [ 183.937138][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.408'. [ 183.988061][ T5242] Bluetooth: hci3: unexpected event for opcode 0x080d [ 183.988136][ T5292] usb 5-1: USB disconnect, device number 20 [ 184.084881][ T5242] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.192255][ T29] audit: type=1326 audit(1727381632.519:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e817df39 code=0x7ffc0000 [ 184.193010][ T7164] FAULT_INJECTION: forcing a failure. [ 184.193010][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 184.214452][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.214879][ T5280] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 184.268657][ T7165] netlink: 'syz.1.408': attribute type 3 has an invalid length. [ 184.276500][ T29] audit: type=1326 audit(1727381632.519:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18e817c8d0 code=0x7ffc0000 [ 184.300539][ T7165] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.408'. [ 184.394469][ T5280] usb 1-1: device descriptor read/64, error -71 [ 184.414191][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.2.410 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 184.424473][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.434532][ T7164] Call Trace: [ 184.437808][ T7164] [ 184.440761][ T7164] dump_stack_lvl+0x241/0x360 [ 184.445477][ T7164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.450691][ T7164] ? __pfx__printk+0x10/0x10 [ 184.455299][ T7164] ? __pfx_snprintf+0x10/0x10 [ 184.460009][ T7164] should_fail_ex+0x3b0/0x4e0 [ 184.464704][ T7164] ? aa_label_asxprint+0x6e/0x130 [ 184.469742][ T7164] should_failslab+0xac/0x100 [ 184.474431][ T7164] ? aa_label_asxprint+0x6e/0x130 [ 184.479462][ T7164] __kmalloc_noprof+0xd8/0x400 [ 184.484278][ T7164] aa_label_asxprint+0x6e/0x130 [ 184.489157][ T7164] apparmor_secid_to_secctx+0xac/0x160 [ 184.494621][ T7164] security_secid_to_secctx+0x9b/0x2c0 [ 184.500091][ T7164] audit_log_task_context+0x11e/0x350 [ 184.505472][ T7164] ? __pfx_audit_log_task_context+0x10/0x10 [ 184.511385][ T7164] audit_log_task+0x198/0x2f0 [ 184.516065][ T7164] ? __pfx_audit_log_task+0x10/0x10 [ 184.521354][ T7164] ? __pfx___cant_migrate+0x10/0x10 [ 184.526656][ T7164] audit_seccomp+0x7b/0x1f0 [ 184.531163][ T7164] __seccomp_filter+0xb38/0x1fe0 [ 184.536108][ T7164] ? __pfx_lock_release+0x10/0x10 [ 184.541144][ T7164] ? vfs_write+0x7bf/0xc90 [ 184.545570][ T7164] ? kmem_cache_free+0x1a2/0x420 [ 184.550516][ T7164] ? __pfx___seccomp_filter+0x10/0x10 [ 184.555905][ T7164] ? __mutex_unlock_slowpath+0x21d/0x750 [ 184.561551][ T7164] ? __pfx_vfs_write+0x10/0x10 [ 184.566350][ T7164] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.572364][ T7164] ? __fget_files+0x3f3/0x470 [ 184.577069][ T7164] ? __secure_computing+0x125/0x370 [ 184.582307][ T7164] syscall_trace_enter+0xa8/0x150 [ 184.587362][ T7164] do_syscall_64+0xcc/0x230 [ 184.591879][ T7164] ? clear_bhb_loop+0x35/0x90 [ 184.596574][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.602500][ T7164] RIP: 0033:0x7f18e817df39 [ 184.606939][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.626569][ T7164] RSP: 002b:00007f18e8fe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 184.635004][ T7164] RAX: ffffffffffffffda RBX: 00007f18e8335f80 RCX: 00007f18e817df39 [ 184.643003][ T7164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 184.650983][ T7164] RBP: 00007f18e8fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 184.658966][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.666959][ T7164] R13: 0000000000000000 R14: 00007f18e8335f80 R15: 00007f18e845fa28 [ 184.674956][ T7164] [ 184.678149][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.694518][ T7164] audit: error in audit_log_task_context [ 184.696905][ T29] audit: type=1326 audit(1727381632.519:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18e817ca1f code=0x7ffc0000 [ 184.774911][ T29] audit: type=1326 audit(1727381632.519:221): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f18e817df39 code=0x7ffc0000 [ 184.855845][ T5280] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 184.878565][ T29] audit: type=1326 audit(1727381633.029:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f18e817c97c code=0x7ffc0000 [ 184.967869][ T29] audit: type=1326 audit(1727381633.029:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f18e817ca1f code=0x7ffc0000 [ 185.059337][ T5280] usb 1-1: device descriptor read/64, error -71 [ 185.077476][ T29] audit: type=1326 audit(1727381633.029:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f18e817cbca code=0x7ffc0000 [ 185.185370][ T5280] usb usb1-port1: attempt power cycle [ 185.201356][ T29] audit: type=1326 audit(1727381633.029:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e817df39 code=0x7ffc0000 [ 185.464444][ T29] audit: type=1326 audit(1727381633.029:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e817df39 code=0x7ffc0000 [ 185.600349][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 185.654525][ T5280] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 185.674037][ T5242] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.844235][ T5242] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.922211][ T5280] usb 1-1: device not accepting address 23, error -71 [ 185.926696][ T5242] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.170044][ T5242] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.307200][ T7191] netlink: 5 bytes leftover after parsing attributes in process `syz.4.416'. [ 186.520759][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 186.720772][ T7207] loop2: detected capacity change from 0 to 53 [ 187.127119][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.426'. [ 187.165821][ T5280] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 187.356875][ T5280] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 187.365718][ T5280] usb 1-1: config 0 has no interface number 0 [ 187.372071][ T5280] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 187.387109][ T5280] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.401892][ T5280] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 187.411694][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 187.420549][ T5280] usb 1-1: Product: syz [ 187.425473][ T5280] usb 1-1: Manufacturer: syz [ 187.431300][ T5280] usb 1-1: SerialNumber: syz [ 187.439315][ T5280] usb 1-1: config 0 descriptor?? [ 187.449861][ T7208] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.459868][ T5280] usb-storage 1-1:0.20: USB Mass Storage device detected [ 187.485517][ T5280] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 187.680075][ T7208] netlink: 'syz.0.422': attribute type 9 has an invalid length. [ 187.693658][ T7208] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.422'. [ 187.726659][ T5280] scsi host1: usb-storage 1-1:0.20 [ 187.746047][ T5280] usb 1-1: USB disconnect, device number 25 [ 188.025179][ T5242] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 188.033777][ T5242] Bluetooth: hci3: Injecting HCI hardware error event [ 188.042179][ T5242] Bluetooth: hci3: hardware error 0x00 [ 188.133082][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.247130][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.297753][ T6589] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 188.366278][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.421215][ T7244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.436'. [ 188.454698][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.465204][ T6589] usb 5-1: Using ep0 maxpacket: 8 [ 188.479719][ T6589] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=c4.6d [ 188.489990][ T6589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.507514][ T6589] usb 5-1: Product: syz [ 188.512870][ T6589] usb 5-1: Manufacturer: syz [ 188.531924][ T6589] usb 5-1: SerialNumber: syz [ 188.540428][ T6589] usb 5-1: config 0 descriptor?? [ 188.548925][ T6589] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 188.688345][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.702231][ T12] bridge_slave_1: left allmulticast mode [ 188.702305][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.718675][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.727987][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.728657][ T12] bridge_slave_1: left promiscuous mode [ 188.742777][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 188.750490][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.760231][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.772220][ T12] bridge_slave_0: left allmulticast mode [ 188.778316][ T12] bridge_slave_0: left promiscuous mode [ 188.784536][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.450671][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.464722][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.477789][ T12] bond0 (unregistering): Released all slaves [ 189.630462][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 189.630482][ T29] audit: type=1326 audit(1727381637.959:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7268 comm="syz.1.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa77df39 code=0x0 [ 189.807539][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 189.914453][ T6589] gspca_sonixj: reg_w1 err -110 [ 189.934720][ T6589] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 189.976805][ T7237] kvm: emulating exchange as write [ 190.074690][ T5242] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 190.245874][ T12] hsr_slave_0: left promiscuous mode [ 190.403068][ T12] hsr_slave_1: left promiscuous mode [ 190.497311][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.574348][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.638986][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.661631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.754313][ T12] veth1_macvtap: left promiscuous mode [ 190.759983][ T12] veth0_macvtap: left promiscuous mode [ 190.784075][ T12] veth1_vlan: left promiscuous mode [ 190.789428][ T12] veth0_vlan: left promiscuous mode [ 190.842167][ T5242] Bluetooth: hci1: command tx timeout [ 190.854269][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.864194][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.872860][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.894732][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.903649][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.913718][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.087737][ T4620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.100452][ T4620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.109038][ T4620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.127905][ T4620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.148826][ T4620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.169265][ T4620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.497705][ T12] team0 (unregistering): Port device team_slave_1 removed [ 191.534652][ T12] team0 (unregistering): Port device team_slave_0 removed [ 192.130584][ T7254] chnl_net:caif_netlink_parms(): no params data found [ 192.219414][ T5452] usb 5-1: USB disconnect, device number 21 [ 192.324120][ T6589] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 192.435350][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.456822][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.490271][ T7254] bridge_slave_0: entered allmulticast mode [ 192.499683][ T7254] bridge_slave_0: entered promiscuous mode [ 192.515660][ T6589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.533993][ T6589] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.564985][ T7303] chnl_net:caif_netlink_parms(): no params data found [ 192.578209][ T6589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.590220][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.601139][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.608819][ T7254] bridge_slave_1: entered allmulticast mode [ 192.609206][ T6589] usb 2-1: config 0 descriptor?? [ 192.626854][ T7254] bridge_slave_1: entered promiscuous mode [ 192.664121][ T6589] pwc: Askey VC010 type 2 USB webcam detected. [ 192.737426][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 192.809302][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.844923][ T6589] pwc: send_video_command error -71 [ 192.850198][ T6589] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 192.857991][ T6589] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 192.869051][ T6589] usb 2-1: USB disconnect, device number 31 [ 192.875142][ T54] Bluetooth: hci1: command tx timeout [ 192.907104][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.920266][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.949810][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.988050][ T7254] team0: Port device team_slave_0 added [ 193.021045][ T7254] team0: Port device team_slave_1 added [ 193.035146][ T54] Bluetooth: hci0: command tx timeout [ 193.059723][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.145846][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.152928][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.194116][ T54] Bluetooth: hci4: command tx timeout [ 193.229744][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.259390][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.271182][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.288454][ T7303] bridge_slave_0: entered allmulticast mode [ 193.309331][ T7303] bridge_slave_0: entered promiscuous mode [ 193.358326][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.417656][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.434447][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.475157][ T6589] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 193.476593][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.520161][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.544352][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.558014][ T7303] bridge_slave_1: entered allmulticast mode [ 193.568377][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.577582][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.581443][ T7303] bridge_slave_1: entered promiscuous mode [ 193.593212][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.606533][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.616065][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.623535][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.655625][ T6589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.665959][ T6589] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.675760][ T6589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.686154][ T6589] usb 2-1: config 0 descriptor?? [ 193.710310][ T6589] pwc: Askey VC010 type 2 USB webcam detected. [ 193.733608][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.750545][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.761761][ T7308] bridge_slave_0: entered allmulticast mode [ 193.771941][ T7308] bridge_slave_0: entered promiscuous mode [ 193.798571][ T7303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.816858][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.826473][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.833650][ T7308] bridge_slave_1: entered allmulticast mode [ 193.840995][ T7308] bridge_slave_1: entered promiscuous mode [ 193.865093][ T7254] hsr_slave_0: entered promiscuous mode [ 193.872423][ T7254] hsr_slave_1: entered promiscuous mode [ 193.888322][ T7303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.982499][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.994588][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.041749][ T7303] team0: Port device team_slave_0 added [ 194.049320][ T7303] team0: Port device team_slave_1 added [ 194.098182][ T6589] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.117551][ T6589] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.136569][ T6589] pwc: recv_control_msg error -32 req 02 val 2c00 [ 194.148908][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.159743][ T6589] pwc: recv_control_msg error -32 req 04 val 1000 [ 194.167422][ T6589] pwc: recv_control_msg error -32 req 04 val 1300 [ 194.182484][ T6589] pwc: recv_control_msg error -32 req 04 val 1400 [ 194.189638][ T6589] pwc: recv_control_msg error -32 req 02 val 2000 [ 194.197052][ T6589] pwc: recv_control_msg error -32 req 02 val 2100 [ 194.209036][ T7308] team0: Port device team_slave_0 added [ 194.212513][ T7308] team0: Port device team_slave_1 added [ 194.247822][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.247840][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.247867][ T7303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.282396][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.337737][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337789][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.368711][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.399505][ T7303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.407064][ T7303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.439920][ T7303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.471824][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.490518][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.498903][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.526412][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.554922][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.561946][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.589663][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.616960][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.706593][ T7303] hsr_slave_0: entered promiscuous mode [ 194.718024][ T7303] hsr_slave_1: entered promiscuous mode [ 194.727071][ T7303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.735254][ T7303] Cannot create hsr debugfs directory [ 194.869624][ T7308] hsr_slave_0: entered promiscuous mode [ 194.888087][ T7308] hsr_slave_1: entered promiscuous mode [ 194.894680][ T7308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.902275][ T7308] Cannot create hsr debugfs directory [ 194.964893][ T54] Bluetooth: hci1: command tx timeout [ 195.058701][ T7360] chnl_net:caif_netlink_parms(): no params data found [ 195.114180][ T54] Bluetooth: hci0: command tx timeout [ 195.189119][ T12] bridge_slave_1: left allmulticast mode [ 195.195351][ T12] bridge_slave_1: left promiscuous mode [ 195.201137][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.210473][ T12] bridge_slave_0: left allmulticast mode [ 195.216667][ T12] bridge_slave_0: left promiscuous mode [ 195.222550][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.233251][ T12] bridge_slave_1: left allmulticast mode [ 195.240814][ T12] bridge_slave_1: left promiscuous mode [ 195.246809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.256117][ T12] bridge_slave_0: left allmulticast mode [ 195.261871][ T12] bridge_slave_0: left promiscuous mode [ 195.267923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.284240][ T54] Bluetooth: hci4: command tx timeout [ 195.520600][ T6589] pwc: recv_control_msg error -71 req 04 val 1500 [ 195.529591][ T6589] pwc: recv_control_msg error -71 req 02 val 2500 [ 195.554335][ T6589] pwc: recv_control_msg error -71 req 02 val 2400 [ 195.562676][ T6589] pwc: recv_control_msg error -71 req 02 val 2600 [ 195.574963][ T6589] pwc: recv_control_msg error -71 req 02 val 2900 [ 195.587554][ T6589] pwc: recv_control_msg error -71 req 02 val 2800 [ 195.604487][ T6589] pwc: recv_control_msg error -71 req 04 val 1100 [ 195.622452][ T6589] pwc: recv_control_msg error -71 req 04 val 1200 [ 195.667724][ T6589] pwc: Registered as video71. [ 195.673516][ T6589] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 195.695322][ T54] Bluetooth: hci3: command tx timeout [ 195.725415][ T6589] usb 2-1: USB disconnect, device number 32 [ 195.852960][ T29] audit: type=1326 audit(1727381644.179:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7369 comm="syz.1.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa77df39 code=0x0 [ 195.995528][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 196.100032][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.114741][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.130301][ T12] bond0 (unregistering): Released all slaves [ 196.236938][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.252097][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.266819][ T12] bond0 (unregistering): Released all slaves [ 196.657338][ T7383] rose0: tun_chr_ioctl cmd 1074812117 [ 196.699698][ T7360] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.711491][ T7360] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.720012][ T7360] bridge_slave_0: entered allmulticast mode [ 196.730573][ T7360] bridge_slave_0: entered promiscuous mode [ 196.752845][ T7360] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.767929][ T7360] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.777030][ T7360] bridge_slave_1: entered allmulticast mode [ 196.786291][ T7360] bridge_slave_1: entered promiscuous mode [ 196.802334][ T7254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.852831][ T7254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.863409][ T7254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.912248][ T7360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.924283][ T6589] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 196.925107][ T7360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.950197][ T7254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.989460][ T7360] team0: Port device team_slave_0 added [ 196.999068][ T7360] team0: Port device team_slave_1 added [ 197.034018][ T54] Bluetooth: hci1: command tx timeout [ 197.062583][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.074311][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.100713][ T7360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.121194][ T6589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.132021][ T6589] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.145449][ T6589] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 197.154917][ T6589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.165338][ T7360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.172336][ T7360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.199108][ T54] Bluetooth: hci0: command tx timeout [ 197.205757][ T6589] usb 2-1: config 0 descriptor?? [ 197.212393][ T7360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.231246][ T12] hsr_slave_0: left promiscuous mode [ 197.237989][ T12] hsr_slave_1: left promiscuous mode [ 197.248578][ T12] hsr_slave_0: left promiscuous mode [ 197.254693][ T12] hsr_slave_1: left promiscuous mode [ 197.284413][ T12] veth1_macvtap: left promiscuous mode [ 197.289954][ T12] veth0_macvtap: left promiscuous mode [ 197.295741][ T12] veth1_vlan: left promiscuous mode [ 197.301728][ T12] veth0_vlan: left promiscuous mode [ 197.308467][ T12] veth1_macvtap: left promiscuous mode [ 197.314177][ T12] veth0_macvtap: left promiscuous mode [ 197.319871][ T12] veth1_vlan: left promiscuous mode [ 197.325706][ T12] veth0_vlan: left promiscuous mode [ 197.354172][ T54] Bluetooth: hci4: command tx timeout [ 197.764212][ T54] Bluetooth: hci3: command tx timeout [ 198.020761][ T12] team0 (unregistering): Port device team_slave_1 removed [ 198.070333][ T12] team0 (unregistering): Port device team_slave_0 removed [ 198.670975][ T7383] coredump: 102(syz.1.454): written to core: VMAs: 37, size 99512320; core: 62131026 bytes, pos 99520512 [ 198.807406][ T6589] usb 2-1: USB disconnect, device number 33 [ 198.985163][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.030650][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.277760][ T54] Bluetooth: hci0: command tx timeout [ 199.434195][ T54] Bluetooth: hci4: command tx timeout [ 199.446595][ T7360] hsr_slave_0: entered promiscuous mode [ 199.453707][ T7360] hsr_slave_1: entered promiscuous mode [ 199.463550][ T7360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.471794][ T7360] Cannot create hsr debugfs directory [ 199.646954][ T7308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 199.772312][ T7308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 199.781869][ T7308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 199.844961][ T54] Bluetooth: hci3: command tx timeout [ 199.862228][ T7308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 199.928735][ T7254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.950783][ T7389] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 199.988478][ T7254] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.022456][ T7389] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 200.040594][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.047727][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.092444][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.099592][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.151611][ T7254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.166159][ T7254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.196790][ T7254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.250933][ T7308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.295632][ T7308] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.331263][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.338406][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.368002][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.375113][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.386013][ T7303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.397222][ T7303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.430393][ T7360] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.449089][ T7303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.473695][ T7303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.519183][ T7360] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.613404][ T7360] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.654067][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 200.683832][ T7254] veth0_vlan: entered promiscuous mode [ 200.710552][ T7254] veth1_vlan: entered promiscuous mode [ 200.743512][ T7360] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.824098][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 200.833648][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.852442][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.893020][ T12] bridge_slave_1: left allmulticast mode [ 200.899999][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 200.900009][ T12] bridge_slave_1: left promiscuous mode [ 200.900180][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.926562][ T8] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 200.936255][ T12] bridge_slave_0: left allmulticast mode [ 200.941924][ T12] bridge_slave_0: left promiscuous mode [ 200.944015][ T8] usb 2-1: Manufacturer: syz [ 200.952429][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.971160][ T8] usb 2-1: config 0 descriptor?? [ 200.978225][ T8] appledisplay 2-1:0.0: Could not find int-in endpoint [ 200.999471][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 201.171737][ T12] geneve0 (unregistering): left allmulticast mode [ 201.484794][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.516581][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.545507][ T12] bond0 (unregistering): Released all slaves [ 201.653764][ T7254] veth0_macvtap: entered promiscuous mode [ 201.691004][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.755489][ T7254] veth1_macvtap: entered promiscuous mode [ 201.771728][ T7303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.863863][ T7360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.914335][ T54] Bluetooth: hci3: command tx timeout [ 201.972971][ T7360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.002153][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.021741][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.033320][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.046990][ T7360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.117043][ T12] hsr_slave_0: left promiscuous mode [ 202.128431][ T12] hsr_slave_1: left promiscuous mode [ 202.135516][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.147766][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.170900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.178813][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.216900][ T12] veth1_macvtap: left promiscuous mode [ 202.222566][ T12] veth0_macvtap: left promiscuous mode [ 202.230703][ T12] veth1_vlan: left promiscuous mode [ 202.243639][ T12] veth0_vlan: left promiscuous mode [ 202.758810][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.803108][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.221858][ T7360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.252681][ T7303] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.282990][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.306618][ T5292] usb 2-1: USB disconnect, device number 34 [ 203.323505][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.330615][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.341193][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.348327][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.390315][ T7254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.407472][ T7254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.419847][ T7254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.430839][ T7254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.490300][ T7308] veth0_vlan: entered promiscuous mode [ 203.547210][ T7308] veth1_vlan: entered promiscuous mode [ 203.711807][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.749673][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.781302][ T7308] veth0_macvtap: entered promiscuous mode [ 203.862337][ T7308] veth1_macvtap: entered promiscuous mode [ 203.879451][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.890247][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.901631][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.911467][ T7308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.911924][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.922242][ T7308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.941793][ T7308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.952208][ T7308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.961327][ T7308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.970563][ T7308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.979630][ T7308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.008696][ T7303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.028981][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.039289][ T7360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.180577][ T7360] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.230960][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.238238][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.365565][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.415430][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.422561][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.444008][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.515157][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.597583][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 204.614096][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.625825][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.630505][ T8] usb 3-1: Product: syz [ 204.664488][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.666048][ T8] usb 3-1: Manufacturer: syz [ 204.687031][ T8] usb 3-1: SerialNumber: syz [ 204.707973][ T8] usb 3-1: config 0 descriptor?? [ 204.812578][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.926132][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.935888][ T7303] veth0_vlan: entered promiscuous mode [ 204.962788][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.026903][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.075316][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 205.092539][ T7453] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.107725][ T7453] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.108513][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.129226][ T7453] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.134358][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.138717][ T7453] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.158454][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.168927][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.185075][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.192655][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.213878][ T7360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.254446][ T7469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.305630][ T7303] veth1_vlan: entered promiscuous mode [ 205.327727][ T7469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.385306][ T8] usb 3-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 205.480092][ T7474] sctp: [Deprecated]: syz.0.445 (pid 7474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.480092][ T7474] Use struct sctp_sack_info instead [ 205.524634][ T7360] veth0_vlan: entered promiscuous mode [ 205.551346][ T7474] netlink: 19 bytes leftover after parsing attributes in process `syz.0.445'. [ 205.584043][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 205.608126][ T7303] veth0_macvtap: entered promiscuous mode [ 205.617385][ T8] usb 3-1: no permanent extended address found, random address set [ 205.630380][ T7360] veth1_vlan: entered promiscuous mode [ 205.649996][ T12] bridge_slave_1: left allmulticast mode [ 205.656832][ T7474] netlink: 19 bytes leftover after parsing attributes in process `syz.0.445'. [ 205.669484][ T12] bridge_slave_1: left promiscuous mode [ 205.691002][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.715231][ T12] bridge_slave_0: left allmulticast mode [ 205.722007][ T12] bridge_slave_0: left promiscuous mode [ 205.735821][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.366387][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.388222][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.444375][ T12] bond0 (unregistering): Released all slaves [ 206.472893][ T7303] veth1_macvtap: entered promiscuous mode [ 206.636701][ T8] usb 3-1: USB disconnect, device number 10 [ 206.651309][ T7506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.462'. [ 206.742187][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.757143][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.769401][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.803737][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.826381][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.852137][ T7360] veth0_macvtap: entered promiscuous mode [ 206.914631][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.925755][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.936534][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.947475][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.958898][ T7303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.057469][ T7360] veth1_macvtap: entered promiscuous mode [ 207.201800][ T7303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.234222][ T7303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.275402][ T54] Bluetooth: hci2: command tx timeout [ 207.277122][ T7303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.320079][ T7303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.381609][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.394606][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.404545][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.415036][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.425180][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.436466][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.447836][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.463383][ T7471] chnl_net:caif_netlink_parms(): no params data found [ 207.546298][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.562178][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.622824][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.634279][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.644634][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.655475][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.667266][ T7360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.821192][ T7486] coredump: 6(syz.0.461): written to core: VMAs: 36, size 97341440; core: 60013348 bytes, pos 97349632 [ 207.900344][ T12] hsr_slave_0: left promiscuous mode [ 207.906243][ T12] hsr_slave_1: left promiscuous mode [ 207.924779][ T12] veth1_macvtap: left promiscuous mode [ 207.930367][ T12] veth0_macvtap: left promiscuous mode [ 207.956873][ T12] veth1_vlan: left promiscuous mode [ 207.962128][ T12] veth0_vlan: left promiscuous mode [ 208.541694][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.581249][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.667003][ T5283] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 208.834115][ T5283] usb 1-1: device descriptor read/64, error -71 [ 208.911390][ T7360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.920811][ T7360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.930141][ T7360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.939255][ T7360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.072488][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.083096][ T5283] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 209.099158][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.107394][ T7471] bridge_slave_0: entered allmulticast mode [ 209.114194][ T7471] bridge_slave_0: entered promiscuous mode [ 209.133469][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.158283][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.176505][ T7471] bridge_slave_1: entered allmulticast mode [ 209.189889][ T7471] bridge_slave_1: entered promiscuous mode [ 209.224891][ T5283] usb 1-1: device descriptor read/64, error -71 [ 209.328955][ T7471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.348492][ T7471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.361440][ T54] Bluetooth: hci2: command tx timeout [ 209.369202][ T5283] usb usb1-port1: attempt power cycle [ 209.394810][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.402661][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.420564][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.441058][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.469086][ T7471] team0: Port device team_slave_0 added [ 209.523312][ T7471] team0: Port device team_slave_1 added [ 209.612708][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.631191][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.639960][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.649124][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.650309][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.665031][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.666194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.688739][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.690331][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.706164][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.733484][ T5283] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 209.741282][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.750237][ T7471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.761616][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.772431][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.780157][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.807311][ T5283] usb 1-1: device descriptor read/8, error -71 [ 209.822009][ T7471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.002959][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.025629][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.055956][ T5283] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 210.080718][ T5283] usb 1-1: device descriptor read/8, error -71 [ 210.081694][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 210.184378][ T5283] usb usb1-port1: unable to enumerate USB device [ 210.230796][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.242449][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.264488][ T7471] hsr_slave_0: entered promiscuous mode [ 210.271902][ T7471] hsr_slave_1: entered promiscuous mode [ 210.279780][ T7471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.287879][ T7471] Cannot create hsr debugfs directory [ 210.358458][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.368984][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.435530][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.445993][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.718839][ T7547] chnl_net:caif_netlink_parms(): no params data found [ 211.041966][ T53] bridge_slave_1: left allmulticast mode [ 211.055265][ T53] bridge_slave_1: left promiscuous mode [ 211.061035][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.096597][ T53] bridge_slave_0: left allmulticast mode [ 211.102314][ T53] bridge_slave_0: left promiscuous mode [ 211.111732][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.435301][ T4620] Bluetooth: hci2: command tx timeout [ 211.444030][ T5283] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 211.619248][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 211.652644][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 211.673431][ T5283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 211.685684][ T5283] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 211.705449][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 211.722873][ T5283] usb 4-1: Product: syz [ 211.727637][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.736870][ T5283] usb 4-1: Manufacturer: syz [ 211.741610][ T5283] usb 4-1: SerialNumber: syz [ 211.758223][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.767824][ T5283] usb 4-1: config 0 descriptor?? [ 211.777786][ T53] bond0 (unregistering): Released all slaves [ 211.844327][ T4620] Bluetooth: hci1: command tx timeout [ 211.863543][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.873295][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.881322][ T7547] bridge_slave_0: entered allmulticast mode [ 211.889570][ T7547] bridge_slave_0: entered promiscuous mode [ 211.903480][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.914431][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.926472][ T7547] bridge_slave_1: entered allmulticast mode [ 211.933567][ T7547] bridge_slave_1: entered promiscuous mode [ 212.079485][ T5285] usb 4-1: USB disconnect, device number 22 [ 212.303626][ T7547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.356244][ T53] hsr_slave_0: left promiscuous mode [ 212.375441][ T6589] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 212.401925][ T53] hsr_slave_1: left promiscuous mode [ 212.420947][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.434429][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.465989][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.491896][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.530128][ T53] veth1_macvtap: left promiscuous mode [ 212.554352][ T5285] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 212.569900][ T53] veth0_macvtap: left promiscuous mode [ 212.578681][ T6589] usb 1-1: config 0 has an invalid interface number: 27 but max is 0 [ 212.615964][ T53] veth1_vlan: left promiscuous mode [ 212.621399][ T6589] usb 1-1: config 0 has no interface number 0 [ 212.628395][ T53] veth0_vlan: left promiscuous mode [ 212.635103][ T6589] usb 1-1: config 0 interface 27 altsetting 0 endpoint 0x2 has invalid maxpacket 128, setting to 64 [ 212.655098][ T6589] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=71.8f [ 212.675177][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 212.685419][ T6589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.713579][ T6589] usb 1-1: Product: syz [ 212.728961][ T6589] usb 1-1: Manufacturer: syz [ 212.745716][ T6589] usb 1-1: SerialNumber: syz [ 212.759245][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 212.768629][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.775961][ T7623] binder: 7617:7623 ioctl c018620b 20000380 returned -14 [ 212.787996][ T6589] usb 1-1: config 0 descriptor?? [ 212.826110][ T5285] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 212.878549][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.924222][ T5285] usb 4-1: Product: syz [ 212.945762][ T5285] usb 4-1: Manufacturer: syz [ 212.965146][ T5285] usb 4-1: SerialNumber: syz [ 212.986384][ T5285] usb 4-1: config 0 descriptor?? [ 213.006048][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.031747][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.066794][ T5285] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 213.079057][ T6589] ath6kl: Failed to submit usb control message: -71 [ 213.085974][ T6589] ath6kl: unable to send the bmi data to the device: -71 [ 213.093089][ T6589] ath6kl: Unable to send get target info: -71 [ 213.108229][ T6589] ath6kl: Failed to init ath6kl core: -71 [ 213.114682][ T6589] ath6kl_usb 1-1:0.27: probe with driver ath6kl_usb failed with error -71 [ 213.133967][ T6589] usb 1-1: USB disconnect, device number 30 [ 213.518191][ T4620] Bluetooth: hci2: command tx timeout [ 213.869411][ T53] team0 (unregistering): Port device team_slave_1 removed [ 213.917069][ T4620] Bluetooth: hci1: command tx timeout [ 213.928465][ T53] team0 (unregistering): Port device team_slave_0 removed [ 214.086105][ T744] usb 4-1: Failed to submit usb control message: -110 [ 214.107477][ T744] usb 4-1: unable to send the bmi data to the device: -110 [ 214.119823][ T744] usb 4-1: unable to get target info from device [ 214.129611][ T744] usb 4-1: could not get target info (-110) [ 214.139246][ T744] usb 4-1: could not probe fw (-110) [ 214.257399][ T5292] usb 4-1: USB disconnect, device number 23 [ 214.569045][ T7547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.607811][ T7642] netlink: 'syz.3.479': attribute type 4 has an invalid length. [ 214.691616][ T7638] netlink: 'syz.3.479': attribute type 4 has an invalid length. [ 214.739864][ T7646] binder: BINDER_SET_CONTEXT_MGR already set [ 214.750055][ T7646] binder: 7644:7646 ioctl 4018620d 20000100 returned -16 [ 214.759837][ T7471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.777223][ T7645] binder: BINDER_SET_CONTEXT_MGR already set [ 214.783265][ T7645] binder: 7644:7645 ioctl 4018620d 200001c0 returned -16 [ 214.819587][ T7547] team0: Port device team_slave_0 added [ 214.829183][ T7547] team0: Port device team_slave_1 added [ 214.900157][ T7471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.931709][ T7654] netlink: 'syz.3.485': attribute type 12 has an invalid length. [ 214.940019][ T7654] netlink: 'syz.3.485': attribute type 11 has an invalid length. [ 214.947960][ T7654] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.485'. [ 214.961591][ T7471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.002092][ T7471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.018066][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.033547][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.059542][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.075379][ T7547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.111999][ T7547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.119229][ T7547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.134869][ T5292] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 215.149103][ T7547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.215632][ T7547] hsr_slave_0: entered promiscuous mode [ 215.227440][ T7547] hsr_slave_1: entered promiscuous mode [ 215.318998][ T5292] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 215.339259][ T5292] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 215.357961][ T5292] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.375013][ T5292] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25090, setting to 1024 [ 215.392191][ T5292] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 215.406124][ T5292] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 215.418756][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.694309][ T5292] ath6kl: Failed to submit usb control message: -71 [ 215.701356][ T5292] ath6kl: unable to send the bmi data to the device: -71 [ 215.715599][ T5292] ath6kl: Unable to send get target info: -71 [ 215.764706][ T5292] ath6kl: Failed to init ath6kl core: -71 [ 215.765333][ T5292] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 215.775158][ T5292] usb 1-1: USB disconnect, device number 31 [ 215.990687][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.004563][ T4620] Bluetooth: hci1: command tx timeout [ 216.103884][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.121830][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.129116][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.187195][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.194412][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.397614][ T7547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.416835][ T7547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.467612][ T7547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.477532][ T7547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.498124][ T7471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.813433][ T7471] veth0_vlan: entered promiscuous mode [ 216.874727][ T7471] veth1_vlan: entered promiscuous mode [ 216.981498][ T7547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.104083][ T51] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.131628][ T7547] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.163637][ T7471] veth0_macvtap: entered promiscuous mode [ 217.238297][ T7471] veth1_macvtap: entered promiscuous mode [ 217.310622][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 217.321113][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.328312][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.347507][ T51] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 217.364017][ T51] usb 5-1: config 0 has no interface number 0 [ 217.381309][ T51] usb 5-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.395239][ T51] usb 5-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 217.416262][ T51] usb 5-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 217.429938][ T51] usb 5-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 217.452164][ T51] usb 5-1: Product: syz [ 217.481319][ T51] usb 5-1: Manufacturer: syz [ 217.511981][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.513691][ T51] usb 5-1: SerialNumber: syz [ 217.555589][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.584922][ T51] usb 5-1: config 0 descriptor?? [ 217.602879][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.615239][ T51] ftdi_sio 5-1:0.155: FTDI USB Serial Device converter detected [ 217.647263][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.655929][ T51] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 217.675994][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.721201][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.771575][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.832685][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.832766][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.879862][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.879893][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.879907][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.879924][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.879939][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.879956][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.881164][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.892391][ T7471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.892430][ T7471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.892459][ T7471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.892487][ T7471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.031111][ T7547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.077011][ T4620] Bluetooth: hci1: command tx timeout [ 218.338976][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.339001][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.385920][ T7547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.409588][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.409612][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.454017][ T51] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 218.514649][ T7547] veth0_vlan: entered promiscuous mode [ 218.546907][ T5282] usb 5-1: USB disconnect, device number 22 [ 218.547098][ T7547] veth1_vlan: entered promiscuous mode [ 218.568503][ T5282] ftdi_sio 5-1:0.155: device disconnected [ 218.605583][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.624757][ T51] usb 1-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=7c.21 [ 218.635816][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.646510][ T7547] veth0_macvtap: entered promiscuous mode [ 218.653748][ T51] usb 1-1: Product: syz [ 218.658166][ T51] usb 1-1: Manufacturer: syz [ 218.662792][ T51] usb 1-1: SerialNumber: syz [ 218.669841][ T7547] veth1_macvtap: entered promiscuous mode [ 218.679356][ T51] usb 1-1: config 0 descriptor?? [ 218.703489][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.715016][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.725190][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.738633][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.753274][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.770001][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.780725][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.799011][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.809273][ T5285] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 218.824637][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.843012][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.861128][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.872869][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.892592][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.903681][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.910478][ T7729] binder: 7728:7729 ioctl 40286608 20000600 returned -22 [ 218.921092][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.940573][ T7547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.953019][ T7547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.964387][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.980646][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.981781][ T7547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.002388][ T5285] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.019928][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.042160][ T7547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.050642][ T51] usb 1-1: USB disconnect, device number 32 [ 219.057592][ T5285] usb 2-1: Product: syz [ 219.069794][ T5285] usb 2-1: Manufacturer: syz [ 219.076072][ T7547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.090220][ T5285] usb 2-1: SerialNumber: syz [ 219.097749][ T7547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.108720][ T5285] usb 2-1: config 0 descriptor?? [ 219.113960][ T7547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.296767][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.316151][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.380906][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.433428][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.695723][ T5285] usb 2-1: Firmware version (0.0) predates our first public release. [ 219.743972][ T5285] usb 2-1: Please update to version 0.2 or newer [ 219.886490][ T5285] usb 2-1: USB disconnect, device number 35 [ 220.224265][ T5281] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 220.434350][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 220.456424][ T5281] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 220.479467][ T5281] usb 3-1: config 0 has no interface number 0 [ 220.496117][ T5281] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 220.511317][ T7789] netlink: 'syz.4.504': attribute type 12 has an invalid length. [ 220.524083][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.552658][ T5281] usb 3-1: Product: syz [ 220.554034][ T7789] netlink: 'syz.4.504': attribute type 11 has an invalid length. [ 220.563998][ T5281] usb 3-1: Manufacturer: syz [ 220.579401][ T5281] usb 3-1: SerialNumber: syz [ 220.597313][ T5281] usb 3-1: config 0 descriptor?? [ 220.617211][ T5281] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 220.620562][ T7789] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.504'. [ 220.642065][ T6077] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.915771][ T6077] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.047728][ T8] usb 3-1: USB disconnect, device number 11 [ 221.147003][ T6077] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.343158][ T29] audit: type=1326 audit(1727381669.629:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c057df39 code=0x0 [ 221.451824][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.461244][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.470189][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.512010][ T7784] fuse: Bad value for 'user_id' [ 221.524768][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.533585][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.541316][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.608978][ T6077] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.631070][ T7784] fuse: Bad value for 'user_id' [ 221.739635][ T6077] bridge_slave_1: left allmulticast mode [ 221.754611][ T6077] bridge_slave_1: left promiscuous mode [ 221.773546][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.803388][ T6077] bridge_slave_0: left allmulticast mode [ 221.803408][ T6077] bridge_slave_0: left promiscuous mode [ 221.803533][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.151912][ T7821] tty tty4: ldisc open failed (-12), clearing slot 3 [ 222.617744][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.629855][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.642894][ T6077] bond0 (unregistering): Released all slaves [ 222.682840][ T7828] vlan2: entered promiscuous mode [ 222.688002][ T7828] vlan2: entered allmulticast mode [ 222.693342][ T7828] xfrm0: entered allmulticast mode [ 222.699381][ T7828] xfrm0: entered promiscuous mode [ 222.727012][ T7828] team0: Port device vlan2 added [ 222.754961][ T7835] xfrm0: left allmulticast mode [ 222.759858][ T7835] xfrm0: left promiscuous mode [ 222.788600][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 222.815510][ T7838] xfrm0: entered allmulticast mode [ 222.820699][ T7838] xfrm0: entered promiscuous mode [ 222.914098][ T5285] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 222.966580][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 222.994561][ T8] usb 3-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 223.006075][ T6077] hsr_slave_0: left promiscuous mode [ 223.023521][ T6077] hsr_slave_1: left promiscuous mode [ 223.029186][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.055559][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 28796, setting to 1024 [ 223.074090][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.081540][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.099795][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 223.100011][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.129930][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.130608][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.143539][ T8] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 223.165672][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.174817][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.182724][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.202640][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.213530][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.233097][ T8] usb 3-1: config 0 descriptor?? [ 223.235486][ T6077] veth1_macvtap: left promiscuous mode [ 223.244334][ T7825] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.253047][ T8] hso 3-1:0.0: Can't find BULK OUT endpoint [ 223.254392][ T6077] veth0_macvtap: left promiscuous mode [ 223.267165][ T5285] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.278266][ T6077] veth1_vlan: left promiscuous mode [ 223.283589][ T6077] veth0_vlan: left promiscuous mode [ 223.286091][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.310514][ T5285] usb 5-1: config 0 descriptor?? [ 223.319627][ T7837] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 223.351408][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.363389][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.375208][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.383658][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.391734][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.400737][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.546260][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.558335][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.584778][ T5282] usb 3-1: USB disconnect, device number 12 [ 223.594519][ T54] Bluetooth: hci4: command tx timeout [ 223.754327][ T5285] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 223.763809][ T5285] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 223.807990][ T5285] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 223.932815][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 223.989053][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 224.068626][ T51] usb 5-1: USB disconnect, device number 23 [ 224.430057][ T7846] dummy0: entered promiscuous mode [ 224.439198][ T7846] dummy0: left promiscuous mode [ 224.826776][ T7822] chnl_net:caif_netlink_parms(): no params data found [ 225.031680][ T7844] chnl_net:caif_netlink_parms(): no params data found [ 225.038626][ T51] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 225.204020][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 225.234206][ T7822] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.251964][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.262136][ T7822] bridge_slave_0: entered allmulticast mode [ 225.273263][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 225.274578][ T7822] bridge_slave_0: entered promiscuous mode [ 225.291672][ T7822] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.314262][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.321525][ T7822] bridge_slave_1: entered allmulticast mode [ 225.327584][ T51] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 225.342380][ T51] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 225.342697][ T7822] bridge_slave_1: entered promiscuous mode [ 225.434168][ T54] Bluetooth: hci0: command tx timeout [ 225.440976][ T51] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 225.468264][ T51] usb 5-1: Product: syz [ 225.474506][ T51] usb 5-1: Manufacturer: syz [ 225.479131][ T51] usb 5-1: SerialNumber: syz [ 225.495661][ T51] usb 5-1: config 0 descriptor?? [ 225.673015][ T6077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.684145][ T54] Bluetooth: hci4: command tx timeout [ 225.722508][ T51] usb 5-1: USB disconnect, device number 24 [ 225.772635][ T7822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.797845][ T7822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.847724][ T6077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.955916][ T6077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.972079][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.979416][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.986679][ T7844] bridge_slave_0: entered allmulticast mode [ 225.994355][ T7844] bridge_slave_0: entered promiscuous mode [ 226.005767][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.013015][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.024333][ T7844] bridge_slave_1: entered allmulticast mode [ 226.031374][ T7844] bridge_slave_1: entered promiscuous mode [ 226.049714][ T7822] team0: Port device team_slave_0 added [ 226.077247][ T6077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.141487][ T7822] team0: Port device team_slave_1 added [ 226.161220][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.216070][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.223180][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.224965][ T5283] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 226.259789][ T7822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.280789][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.308622][ T7822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.324241][ T7822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.351374][ T7822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.424178][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 226.434223][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.460921][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.525467][ T5283] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 226.535567][ T7844] team0: Port device team_slave_0 added [ 226.544179][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.554989][ T7844] team0: Port device team_slave_1 added [ 226.562252][ T5283] usb 5-1: Product: syz [ 226.586540][ T5283] usb 5-1: Manufacturer: syz [ 226.591179][ T5283] usb 5-1: SerialNumber: syz [ 226.607760][ T5283] usb 5-1: config 0 descriptor?? [ 226.654781][ T5283] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 226.811324][ T7822] hsr_slave_0: entered promiscuous mode [ 226.824157][ T7822] hsr_slave_1: entered promiscuous mode [ 226.832176][ T7822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.922154][ T7822] Cannot create hsr debugfs directory [ 226.978191][ T6077] bridge_slave_1: left allmulticast mode [ 226.989347][ T6077] bridge_slave_1: left promiscuous mode [ 227.006660][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.022364][ T6077] bridge_slave_0: left allmulticast mode [ 227.032686][ T6077] bridge_slave_0: left promiscuous mode [ 227.048444][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.516825][ T54] Bluetooth: hci0: command tx timeout [ 227.694763][ T53] usb 5-1: Failed to submit usb control message: -110 [ 227.711085][ T53] usb 5-1: unable to send the bmi data to the device: -110 [ 227.728868][ T53] usb 5-1: unable to get target info from device [ 227.738988][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.753869][ T53] usb 5-1: could not get target info (-110) [ 227.754204][ T54] Bluetooth: hci4: command tx timeout [ 227.781142][ T53] usb 5-1: could not probe fw (-110) [ 227.821335][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.851617][ T6077] bond0 (unregistering): Released all slaves [ 227.887349][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.925822][ T5285] usb 5-1: USB disconnect, device number 25 [ 227.933748][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.003671][ T7844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.135924][ T7844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.160905][ T7844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.191532][ T7844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.283487][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 228.284025][ T5452] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 228.312924][ T7844] hsr_slave_0: entered promiscuous mode [ 228.321554][ T7844] hsr_slave_1: entered promiscuous mode [ 228.331423][ T7844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.339753][ T7844] Cannot create hsr debugfs directory [ 228.477599][ T5452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.510440][ T5452] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 228.525940][ T5452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.568090][ T5452] usb 3-1: config 0 descriptor?? [ 228.728895][ T6077] hsr_slave_0: left promiscuous mode [ 228.740789][ T6077] hsr_slave_1: left promiscuous mode [ 228.747246][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.755961][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.765306][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.772794][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.802563][ T6077] veth1_macvtap: left promiscuous mode [ 228.808236][ T6077] veth0_macvtap: left promiscuous mode [ 228.813847][ T6077] veth1_vlan: left promiscuous mode [ 228.819204][ T6077] veth0_vlan: left promiscuous mode [ 229.002566][ T5452] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 229.270706][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 229.319291][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 229.597046][ T54] Bluetooth: hci0: command tx timeout [ 229.834325][ T54] Bluetooth: hci4: command tx timeout [ 230.013277][ T5281] usb 3-1: USB disconnect, device number 13 [ 230.354646][ T7941] fuse: Bad value for 'fd' [ 230.469931][ T7844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.490992][ T7844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.506939][ T7844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.533698][ T7844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.590716][ T7822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.655889][ T7822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.694534][ T7822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.754190][ T7822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.889109][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.940975][ T7844] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.985880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.993021][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.007936][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.015097][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.030155][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.043114][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 231.105733][ T7822] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.155568][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.162683][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.190512][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.197661][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.313389][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.333648][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.461491][ T7822] veth0_vlan: entered promiscuous mode [ 231.482624][ T7822] veth1_vlan: entered promiscuous mode [ 231.569851][ T7844] veth0_vlan: entered promiscuous mode [ 231.595739][ T7822] veth0_macvtap: entered promiscuous mode [ 231.612211][ T7822] veth1_macvtap: entered promiscuous mode [ 231.625283][ T7844] veth1_vlan: entered promiscuous mode [ 231.657230][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.669599][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.680279][ T54] Bluetooth: hci0: command tx timeout [ 231.686815][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.698430][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.708721][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.719727][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.733147][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.756270][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.766908][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.780922][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.784230][ T5282] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 231.804370][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.816786][ T7822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.832238][ T7822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.853313][ T7822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.866165][ T7844] veth0_macvtap: entered promiscuous mode [ 231.897896][ T7844] veth1_macvtap: entered promiscuous mode [ 231.942213][ T7822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.954168][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 231.969076][ T7822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.979443][ T5282] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 231.994316][ T5282] usb 2-1: config 0 has no interface number 0 [ 232.001339][ T7822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.012126][ T7822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.023268][ T5282] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 232.054726][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.081682][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.083248][ T5282] usb 2-1: Product: syz [ 232.099427][ T5282] usb 2-1: Manufacturer: syz [ 232.107732][ T5282] usb 2-1: SerialNumber: syz [ 232.123112][ T5282] usb 2-1: config 0 descriptor?? [ 232.133154][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.157976][ T5282] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 232.173847][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.197978][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.216857][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.231408][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.248152][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.261408][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.282633][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.323771][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.336062][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.345998][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.356760][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.367104][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.383974][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.401769][ T7844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.415085][ T7844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.426904][ T7844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.470461][ T7844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.484528][ T7844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.502721][ T7844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.513664][ T7844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.670020][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.709869][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.814570][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.845517][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.875633][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.898224][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.966913][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.989167][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.315517][ T5283] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 233.484145][ T5283] usb 1-1: Using ep0 maxpacket: 16 [ 233.503547][ T5283] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 233.528475][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 233.542706][ T5283] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.556232][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.573963][ T5283] usb 1-1: Product: syz [ 233.583991][ T5283] usb 1-1: Manufacturer: syz [ 233.588648][ T5283] usb 1-1: SerialNumber: syz [ 233.619872][ T5283] usb 1-1: config 0 descriptor?? [ 233.632781][ T5283] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 233.647656][ T5283] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 233.659252][ T5282] gspca_topro: Sensor cx0342 [ 233.827252][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 233.905379][ T29] audit: type=1326 audit(1727381682.239:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8035 comm="syz.3.538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c57df39 code=0x0 [ 233.971614][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.028780][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.196680][ T9] usb 2-1: USB disconnect, device number 36 [ 234.253199][ T5283] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 234.277682][ T5283] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 234.339127][ T29] audit: type=1326 audit(1727381682.669:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.2.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b037df39 code=0x0 [ 234.374007][ T5282] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 234.542584][ T5282] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 234.599311][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.644366][ T5282] usb 5-1: Product: syz [ 234.653669][ T5282] usb 5-1: Manufacturer: syz [ 234.664331][ T5282] usb 5-1: SerialNumber: syz [ 234.673057][ T5282] usb 5-1: config 0 descriptor?? [ 234.795505][ T29] audit: type=1326 audit(1727381683.099:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8067 comm="syz.3.542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d6c57df39 code=0x0 [ 235.114372][ T5281] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 235.182193][ T5282] usb 5-1: Firmware: major: 110, minor: 48, hardware type: UNKNOWN (28) [ 235.293090][ T5281] usb 2-1: config index 0 descriptor too short (expected 4114, got 18) [ 235.303599][ T5281] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 235.312935][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.321603][ T5281] usb 2-1: Product: syz [ 235.325906][ T5281] usb 2-1: Manufacturer: syz [ 235.330759][ T5281] usb 2-1: SerialNumber: syz [ 235.342533][ T5281] usb 2-1: config 0 descriptor?? [ 235.360931][ T5283] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 235.393131][ T5282] usb 5-1: Firmware: build [ 235.587725][ T5281] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 235.604547][ T29] audit: type=1326 audit(1727381683.939:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8078 comm="syz.3.546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d6c57df39 code=0x0 [ 235.613065][ T5281] asix 2-1:0.0: probe with driver asix failed with error -61 [ 235.744315][ T5282] usb 5-1: failed to fetch extended address, random address set [ 235.764590][ T5282] usb 5-1: atusb_probe: initialization failed, error = -524 [ 235.772772][ T5282] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 235.797329][ T5283] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 235.807558][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.825054][ T5282] usb 5-1: USB disconnect, device number 26 [ 235.831218][ T5283] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 235.844784][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.865443][ T5283] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 235.898078][ T5283] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 235.917292][ T5283] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 235.955019][ T5283] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 235.978158][ T5283] usb 1-1: USB disconnect, device number 33 [ 236.047780][ T8085] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 236.754490][ T5281] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 236.994226][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 237.017663][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 237.027934][ T5281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 237.050021][ T5281] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 237.074124][ T51] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 237.090410][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 237.105818][ T5281] usb 5-1: Product: syz [ 237.121028][ T5281] usb 5-1: Manufacturer: syz [ 237.136083][ T5281] usb 5-1: SerialNumber: syz [ 237.158949][ T5281] usb 5-1: config 0 descriptor?? [ 237.187977][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.256280][ T51] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 237.276921][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.325018][ T51] usb 4-1: config 0 descriptor?? [ 237.356722][ T51] cp210x 4-1:0.0: cp210x converter detected [ 237.439161][ T5282] usb 5-1: USB disconnect, device number 27 [ 237.465461][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.566048][ T51] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 237.586873][ T51] cp210x 4-1:0.0: querying part number failed [ 237.602157][ T51] usb 4-1: cp210x converter now attached to ttyUSB0 [ 237.611374][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.831993][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.904110][ T51] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 237.958396][ T5452] usb 2-1: USB disconnect, device number 37 [ 238.028268][ T4620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.040795][ T4620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.058709][ T4620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.069119][ T4620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.078306][ T4620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 238.085779][ T4620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.094004][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 238.117365][ T51] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.134595][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.187384][ T51] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 238.201059][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.217427][ T51] usb 5-1: Product: syz [ 238.230557][ T51] usb 5-1: Manufacturer: syz [ 238.242913][ T51] usb 5-1: SerialNumber: syz [ 238.259121][ T51] usb 5-1: config 0 descriptor?? [ 238.289761][ T51] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 238.367402][ T11] bridge_slave_1: left allmulticast mode [ 238.424097][ T11] bridge_slave_1: left promiscuous mode [ 238.473648][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.496409][ T11] bridge_slave_0: left allmulticast mode [ 238.504965][ T5281] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 238.523406][ T11] bridge_slave_0: left promiscuous mode [ 238.533543][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.676496][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 238.690069][ T5281] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.738700][ T5281] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 238.770191][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.807681][ T5281] usb 2-1: Product: syz [ 238.822652][ T5281] usb 2-1: Manufacturer: syz [ 238.856523][ T5281] usb 2-1: SerialNumber: syz [ 238.888054][ T5281] usb 2-1: config 0 descriptor?? [ 238.932031][ T5281] usb 2-1: bad CDC descriptors [ 238.950997][ T5281] usb 2-1: unsupported MDLM descriptors [ 239.135072][ T51] usb 2-1: USB disconnect, device number 38 [ 239.364100][ T12] usb 5-1: Failed to submit usb control message: -110 [ 239.398356][ T12] usb 5-1: unable to send the bmi data to the device: -110 [ 239.428195][ T12] usb 5-1: unable to get target info from device [ 239.460413][ T12] usb 5-1: could not get target info (-110) [ 239.485976][ T12] usb 5-1: could not probe fw (-110) [ 239.551488][ T5283] usb 5-1: USB disconnect, device number 28 [ 239.662319][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.711726][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.740479][ T11] bond0 (unregistering): Released all slaves [ 240.018118][ T8131] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 240.150523][ T5283] usb 4-1: USB disconnect, device number 24 [ 240.154032][ T4620] Bluetooth: hci4: command tx timeout [ 240.192586][ T5283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.195901][ T51] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 240.230069][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 240.244634][ T5283] cp210x 4-1:0.0: device disconnected [ 240.384638][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 240.424355][ T51] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.456581][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.504890][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.532904][ T51] usb 3-1: config 0 descriptor?? [ 240.550815][ T51] hub 3-1:0.0: bad descriptor, ignoring hub [ 240.563171][ T51] hub 3-1:0.0: probe with driver hub failed with error -5 [ 240.582214][ T51] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 240.702232][ T29] audit: type=1326 audit(1727381689.029:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.1.567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1e957df39 code=0x0 [ 240.779063][ T11] hsr_slave_0: left promiscuous mode [ 240.813033][ T11] hsr_slave_1: left promiscuous mode [ 240.935894][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.961416][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.992533][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.022784][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.082464][ T11] veth1_macvtap: left promiscuous mode [ 241.153540][ T11] veth0_macvtap: left promiscuous mode [ 241.167243][ T11] veth1_vlan: left promiscuous mode [ 241.194119][ T11] veth0_vlan: left promiscuous mode [ 241.764405][ T8173] netlink: 'syz.1.571': attribute type 12 has an invalid length. [ 241.772416][ T8173] netlink: 'syz.1.571': attribute type 11 has an invalid length. [ 241.784866][ T8173] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.571'. [ 241.940486][ T11] team0 (unregistering): Port device team_slave_1 removed [ 241.978005][ T11] team0 (unregistering): Port device team_slave_0 removed [ 242.241573][ T4620] Bluetooth: hci4: command tx timeout [ 242.439723][ T8108] chnl_net:caif_netlink_parms(): no params data found [ 242.679234][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.715678][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.747482][ T8108] bridge_slave_0: entered allmulticast mode [ 242.775428][ T8108] bridge_slave_0: entered promiscuous mode [ 242.792065][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.817979][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.839166][ T8108] bridge_slave_1: entered allmulticast mode [ 242.854186][ T8108] bridge_slave_1: entered promiscuous mode [ 242.957053][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.980966][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.994122][ T5452] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 243.080869][ T8108] team0: Port device team_slave_0 added [ 243.090809][ T8108] team0: Port device team_slave_1 added [ 243.164591][ T5452] usb 2-1: Using ep0 maxpacket: 16 [ 243.183248][ T5452] usb 2-1: config 5 has no interfaces? [ 243.183658][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.196667][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.197910][ T5452] usb 2-1: New USB device found, idVendor=12d1, idProduct=c71e, bcdDevice=b3.13 [ 243.223073][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.266633][ T5452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.277624][ T5452] usb 2-1: Product: syz [ 243.281814][ T5452] usb 2-1: Manufacturer: syz [ 243.288861][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.295897][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.321963][ T5452] usb 2-1: SerialNumber: syz [ 243.327589][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.402136][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.411906][ T51] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 243.424052][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.432207][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.444074][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.463290][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.474879][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 243.493699][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.557501][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.575168][ T51] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 243.593044][ T5283] usb 2-1: USB disconnect, device number 39 [ 243.618446][ T8108] hsr_slave_0: entered promiscuous mode [ 243.624498][ T51] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.638564][ T51] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 243.640018][ T8108] hsr_slave_1: entered promiscuous mode [ 243.651174][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.661763][ T8108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.675606][ T8108] Cannot create hsr debugfs directory [ 243.699299][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.787527][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.903809][ T8202] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.575'. [ 243.947129][ T8202] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 244.254637][ T5282] usb 3-1: USB disconnect, device number 14 [ 244.314123][ T54] Bluetooth: hci4: command tx timeout [ 244.406128][ T51] usb 4-1: string descriptor 0 read error: -71 [ 244.428938][ T51] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 244.501240][ T11] bridge_slave_1: left allmulticast mode [ 244.519014][ T51] usb 4-1: USB disconnect, device number 25 [ 244.554957][ T11] bridge_slave_1: left promiscuous mode [ 244.560730][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.675849][ T11] bridge_slave_0: left allmulticast mode [ 244.704211][ T11] bridge_slave_0: left promiscuous mode [ 244.722223][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.734421][ T5282] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 244.906360][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 244.931738][ T5282] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 244.986037][ T5282] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 245.012483][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.028184][ T5282] usb 2-1: Product: syz [ 245.032573][ T5282] usb 2-1: Manufacturer: syz [ 245.056745][ T5282] usb 2-1: SerialNumber: syz [ 245.081030][ T5282] usb 2-1: config 0 descriptor?? [ 245.117533][ T8226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.143202][ T8226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.529098][ T54] Bluetooth: hci3: command tx timeout [ 246.394159][ T54] Bluetooth: hci4: command tx timeout [ 247.216746][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.333769][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.361797][ T11] bond0 (unregistering): Released all slaves [ 247.399542][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 247.595521][ T54] Bluetooth: hci3: command tx timeout [ 247.618945][ T8227] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.632005][ T8227] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.648021][ T8227] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.658828][ T8227] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.675386][ T8227] geneve2: entered promiscuous mode [ 247.680750][ T8227] geneve2: entered allmulticast mode [ 248.586449][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.593709][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.634596][ T8205] bridge_slave_0: entered allmulticast mode [ 248.944169][ T8205] bridge_slave_0: entered promiscuous mode [ 248.966375][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.993678][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.101387][ T8205] bridge_slave_1: entered allmulticast mode [ 249.112977][ T8205] bridge_slave_1: entered promiscuous mode [ 249.674029][ T54] Bluetooth: hci3: command tx timeout [ 250.984242][ T5282] dm9601 2-1:0.0: probe with driver dm9601 failed with error -110 [ 252.864156][ T54] Bluetooth: hci3: command tx timeout [ 252.923901][ C0] sched: DL replenish lagged too much [ 253.590661][ T5282] usb 2-1: USB disconnect, device number 40 [ 253.791745][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.335170][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.345908][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.358479][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.369333][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.377476][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.385237][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.775208][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.781559][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.475131][ T54] Bluetooth: hci5: command tx timeout [ 258.554055][ T54] Bluetooth: hci5: command tx timeout [ 260.634142][ T54] Bluetooth: hci5: command tx timeout [ 262.714043][ T54] Bluetooth: hci5: command tx timeout [ 264.822789][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.844129][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.852239][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.865517][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.875842][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.887348][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.188407][ T4620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.204376][ T4620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.216567][ T4620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.225424][ T4620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.235057][ T4620] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 265.242426][ T4620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 266.954303][ T54] Bluetooth: hci1: command tx timeout [ 267.354125][ T54] Bluetooth: hci6: command tx timeout [ 269.034321][ T54] Bluetooth: hci1: command tx timeout [ 269.434138][ T54] Bluetooth: hci6: command tx timeout [ 271.114604][ T54] Bluetooth: hci1: command tx timeout [ 271.514116][ T54] Bluetooth: hci6: command tx timeout [ 273.194164][ T54] Bluetooth: hci1: command tx timeout [ 273.594216][ T54] Bluetooth: hci6: command tx timeout [ 300.081481][ T4620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.091171][ T4620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.101316][ T4620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.112365][ T4620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.120077][ T4620] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 300.127718][ T4620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.154181][ T4620] Bluetooth: hci7: command tx timeout [ 303.833652][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 303.853218][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 303.861504][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 303.869704][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 303.881549][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 303.889058][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 304.234050][ T4620] Bluetooth: hci7: command tx timeout [ 305.994045][ T4620] Bluetooth: hci8: command tx timeout [ 306.320987][ T4620] Bluetooth: hci7: command tx timeout [ 308.074102][ T4620] Bluetooth: hci8: command tx timeout [ 308.394000][ T4620] Bluetooth: hci7: command tx timeout [ 310.154148][ T4620] Bluetooth: hci8: command tx timeout [ 312.234098][ T4620] Bluetooth: hci8: command tx timeout [ 314.432150][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 314.448876][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 314.456795][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 314.474057][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 314.481696][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 314.490754][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 316.554226][ T54] Bluetooth: hci9: command tx timeout [ 317.198429][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.213980][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.634183][ T4620] Bluetooth: hci9: command tx timeout [ 320.724241][ T4620] Bluetooth: hci9: command tx timeout [ 322.794005][ T4620] Bluetooth: hci9: command tx timeout [ 325.845132][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 325.854535][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 325.864951][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 325.873197][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 325.895339][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 325.912362][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 325.948838][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 325.957834][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 325.966104][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 325.984584][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 325.994133][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 326.002493][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 327.996378][ T54] Bluetooth: hci10: command tx timeout [ 328.074196][ T54] Bluetooth: hci11: command tx timeout [ 329.519567][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 330.073993][ T54] Bluetooth: hci10: command tx timeout [ 330.154074][ T54] Bluetooth: hci11: command tx timeout [ 332.154118][ T54] Bluetooth: hci10: command tx timeout [ 332.234021][ T54] Bluetooth: hci11: command tx timeout [ 334.234076][ T54] Bluetooth: hci10: command tx timeout [ 334.314140][ T54] Bluetooth: hci11: command tx timeout [ 350.012731][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 360.239815][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 360.426058][ T5228] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 360.436025][ T5228] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 360.454346][ T5228] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 360.465100][ T5228] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 360.475541][ T5228] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 360.484069][ T5228] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 364.484061][ T8299] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 364.502345][ T8299] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 364.511365][ T8299] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 364.525553][ T8299] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 364.536473][ T8299] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 364.544291][ T8299] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 370.483979][ T8302] Bluetooth: hci3: command 0x0406 tx timeout [ 375.836548][ T8306] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 375.846337][ T8306] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 375.854634][ T8306] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 375.865674][ T8306] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 375.875965][ T8306] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 375.883430][ T8306] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.639407][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.675451][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.874236][ T8309] Bluetooth: hci5: command 0x0406 tx timeout [ 387.014804][ T8314] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 387.025266][ T8314] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 387.044092][ T8314] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 387.054931][ T8314] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 387.062695][ T8314] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 387.070397][ T8314] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 387.147085][ T8317] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 387.174451][ T8317] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 387.182649][ T8317] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 387.190897][ T8317] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 387.199852][ T8317] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 387.207373][ T8317] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 391.034428][ T8321] Bluetooth: hci1: command 0x0406 tx timeout [ 391.040510][ T8321] Bluetooth: hci6: command 0x0406 tx timeout [ 402.314026][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 402.321737][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.369408][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.413382][ T30] task:kworker/u8:0 state:D stack:20888 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 402.451438][ T30] Workqueue: netns cleanup_net [ 402.523889][ T30] Call Trace: [ 402.527243][ T30] [ 402.584008][ T30] __schedule+0x1895/0x4b30 [ 402.588628][ T30] ? __pfx___schedule+0x10/0x10 [ 402.593529][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.683879][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 402.689556][ T30] ? kthread_data+0x52/0xd0 [ 402.753933][ T30] ? schedule+0x90/0x320 [ 402.758261][ T30] ? wq_worker_sleeping+0x66/0x240 [ 402.763422][ T30] ? schedule+0x90/0x320 [ 402.838162][ T30] schedule+0x14b/0x320 [ 402.842408][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.889909][ T30] __mutex_lock+0x6a7/0xd70 [ 402.914053][ T30] ? __mutex_lock+0x52a/0xd70 [ 402.918809][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 402.961364][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.993527][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 403.015863][ T30] ? rcu_is_watching+0x15/0xb0 [ 403.020712][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 403.056572][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 403.062396][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 403.104105][ T30] hwsim_exit_net+0x5c1/0x670 [ 403.109461][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 403.151160][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 403.173880][ T30] cleanup_net+0x802/0xcc0 [ 403.178481][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 403.183472][ T30] ? process_scheduled_works+0x976/0x1850 [ 403.241770][ T30] process_scheduled_works+0xa63/0x1850 [ 403.261136][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 403.290321][ T30] ? assign_work+0x364/0x3d0 [ 403.313974][ T30] worker_thread+0x870/0xd30 [ 403.318672][ T30] ? __kthread_parkme+0x169/0x1d0 [ 403.335603][ T30] ? __pfx_worker_thread+0x10/0x10 [ 403.340823][ T30] kthread+0x2f0/0x390 [ 403.355411][ T30] ? __pfx_worker_thread+0x10/0x10 [ 403.360626][ T30] ? __pfx_kthread+0x10/0x10 [ 403.372781][ T30] ret_from_fork+0x4b/0x80 [ 403.377616][ T30] ? __pfx_kthread+0x10/0x10 [ 403.382358][ T30] ret_from_fork_asm+0x1a/0x30 [ 403.393982][ T30] [ 403.397226][ T30] INFO: task dhcpcd:4896 blocked for more than 144 seconds. [ 403.414375][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 403.421893][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.449343][ T30] task:dhcpcd state:D stack:20608 pid:4896 tgid:4896 ppid:4895 flags:0x00004002 [ 403.467589][ T30] Call Trace: [ 403.470935][ T30] [ 403.477932][ T30] __schedule+0x1895/0x4b30 [ 403.482535][ T30] ? __pfx___schedule+0x10/0x10 [ 403.493322][ T30] ? __pfx_lock_release+0x10/0x10 [ 403.502322][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 403.511880][ T30] ? schedule+0x90/0x320 [ 403.521126][ T30] schedule+0x14b/0x320 [ 403.529620][ T30] schedule_preempt_disabled+0x13/0x30 [ 403.539083][ T30] __mutex_lock+0x6a7/0xd70 [ 403.543688][ T30] ? __mutex_lock+0x52a/0xd70 [ 403.558288][ T30] ? rtnl_dumpit+0x99/0x200 [ 403.563049][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 403.572831][ T30] ? __alloc_skb+0x28f/0x440 [ 403.581339][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 403.590257][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 403.604039][ T30] rtnl_dumpit+0x99/0x200 [ 403.608807][ T30] netlink_dump+0x647/0xd80 [ 403.623349][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 403.628915][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 403.641569][ T30] __netlink_dump_start+0x5a2/0x790 [ 403.648927][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 403.661749][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 403.667175][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.672699][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 403.694695][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 403.699905][ T30] netlink_rcv_skb+0x1e3/0x430 [ 403.713681][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 403.720059][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 403.733995][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.739280][ T30] netlink_unicast+0x7f6/0x990 [ 403.754256][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 403.759622][ T30] ? __virt_addr_valid+0x183/0x530 [ 403.774872][ T30] ? __check_object_size+0x48e/0x900 [ 403.780238][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 403.792702][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.798500][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 403.803505][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.816880][ T30] __sock_sendmsg+0x221/0x270 [ 403.821636][ T30] __sys_sendto+0x39b/0x4f0 [ 403.832978][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 403.842192][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.852584][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.862887][ T30] ? exc_page_fault+0x590/0x8c0 [ 403.871709][ T30] __x64_sys_sendto+0xde/0x100 [ 403.881796][ T30] do_syscall_64+0xf3/0x230 [ 403.890345][ T30] ? clear_bhb_loop+0x35/0x90 [ 403.899040][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.908903][ T30] RIP: 0033:0x7fe87246aad7 [ 403.913378][ T30] RSP: 002b:00007fff89f9ee68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 403.928394][ T30] RAX: ffffffffffffffda RBX: 00007fff89f9ff90 RCX: 00007fe87246aad7 [ 403.942197][ T30] RDX: 0000000000000014 RSI: 00007fff89f9feb0 RDI: 0000000000000019 [ 403.954664][ T30] RBP: 00007fff89f9ff20 R08: 00007fff89f9fe94 R09: 000000000000000c [ 403.962707][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 403.973879][ T30] R13: 00007fff89f9fe94 R14: 00007fff89f9feb0 R15: 0000000000000105 [ 403.981931][ T30] [ 403.991503][ T30] INFO: task kworker/u8:10:6706 blocked for more than 145 seconds. [ 404.000097][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 404.016176][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.032685][ T30] task:kworker/u8:10 state:D stack:21112 pid:6706 tgid:6706 ppid:2 flags:0x00004000 [ 404.044124][ T30] Workqueue: events_unbound linkwatch_event [ 404.050104][ T30] Call Trace: [ 404.053423][ T30] [ 404.064406][ T30] __schedule+0x1895/0x4b30 [ 404.069008][ T30] ? __pfx___schedule+0x10/0x10 [ 404.082937][ T30] ? __pfx_lock_release+0x10/0x10 [ 404.088352][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 404.101021][ T30] ? kthread_data+0x52/0xd0 [ 404.105663][ T30] ? schedule+0x90/0x320 [ 404.109948][ T30] ? wq_worker_sleeping+0x66/0x240 [ 404.122585][ T30] ? schedule+0x90/0x320 [ 404.128559][ T30] schedule+0x14b/0x320 [ 404.133612][ T30] schedule_preempt_disabled+0x13/0x30 [ 404.147130][ T30] __mutex_lock+0x6a7/0xd70 [ 404.151730][ T30] ? __mutex_lock+0x52a/0xd70 [ 404.161148][ T30] ? linkwatch_event+0xe/0x60 [ 404.169932][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 404.178933][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 404.189559][ T30] ? process_scheduled_works+0x976/0x1850 [ 404.199480][ T30] linkwatch_event+0xe/0x60 [ 404.208008][ T30] process_scheduled_works+0xa63/0x1850 [ 404.213749][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 404.227886][ T30] ? assign_work+0x364/0x3d0 [ 404.233401][ T30] worker_thread+0x870/0xd30 [ 404.242099][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 404.254700][ T30] ? __kthread_parkme+0x169/0x1d0 [ 404.259810][ T30] ? __pfx_worker_thread+0x10/0x10 [ 404.273329][ T30] kthread+0x2f0/0x390 [ 404.277860][ T30] ? __pfx_worker_thread+0x10/0x10 [ 404.283043][ T30] ? __pfx_kthread+0x10/0x10 [ 404.295202][ T30] ret_from_fork+0x4b/0x80 [ 404.299703][ T30] ? __pfx_kthread+0x10/0x10 [ 404.310597][ T30] ret_from_fork_asm+0x1a/0x30 [ 404.318749][ T30] [ 404.321907][ T30] INFO: task syz-executor:7547 blocked for more than 145 seconds. [ 404.334324][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 404.349663][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.359996][ T30] task:syz-executor state:D stack:20432 pid:7547 tgid:7547 ppid:1 flags:0x00004002 [ 404.378079][ T30] Call Trace: [ 404.381427][ T30] [ 404.388176][ T30] __schedule+0x1895/0x4b30 [ 404.392776][ T30] ? __pfx___schedule+0x10/0x10 [ 404.402993][ T30] ? __pfx_lock_release+0x10/0x10 [ 404.410826][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 404.421460][ T30] ? schedule+0x90/0x320 [ 404.431023][ T30] schedule+0x14b/0x320 [ 404.441387][ T30] schedule_preempt_disabled+0x13/0x30 [ 404.449741][ T30] __mutex_lock+0x6a7/0xd70 [ 404.459335][ T30] ? __mutex_lock+0x52a/0xd70 [ 404.466909][ T30] ? tun_chr_close+0x3b/0x1b0 [ 404.471665][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 404.491696][ T30] ? __pfx_call_rcu+0x10/0x10 [ 404.500808][ T30] tun_chr_close+0x3b/0x1b0 [ 404.509216][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 404.518200][ T30] __fput+0x23f/0x880 [ 404.522342][ T30] task_work_run+0x24f/0x310 [ 404.531908][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 404.540702][ T30] ? __pfx_task_work_run+0x10/0x10 [ 404.553010][ T30] ? do_exit+0xa2a/0x28e0 [ 404.559229][ T30] ? kmem_cache_free+0x1a2/0x420 [ 404.569825][ T30] ? do_exit+0xa2a/0x28e0 [ 404.576886][ T30] do_exit+0xa2f/0x28e0 [ 404.581126][ T30] ? __pfx_do_exit+0x10/0x10 [ 404.591101][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 404.599825][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.611749][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.620959][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 404.631613][ T30] do_group_exit+0x207/0x2c0 [ 404.642947][ T30] __x64_sys_exit_group+0x3f/0x40 [ 404.653887][ T30] x64_sys_call+0x2634/0x2640 [ 404.658649][ T30] do_syscall_64+0xf3/0x230 [ 404.663200][ T30] ? clear_bhb_loop+0x35/0x90 [ 404.677680][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.683658][ T30] RIP: 0033:0x7fa2b037df39 [ 404.693341][ T30] RSP: 002b:00007fa2b065ebb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 404.709093][ T30] RAX: ffffffffffffffda RBX: 00007fa2b03f00d9 RCX: 00007fa2b037df39 [ 404.733419][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 404.745317][ T30] RBP: 000000000000006b R08: 00007fa2b065c955 R09: 00007fa2b065fe00 [ 404.753544][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa2b065fe00 [ 404.768870][ T30] R13: 00007fa2b03f00b4 R14: 000000000003cac8 R15: 00007fa2b065fe40 [ 404.779715][ T30] [ 404.783255][ T30] INFO: task syz-executor:8205 blocked for more than 145 seconds. [ 404.800136][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 404.810226][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.826498][ T30] task:syz-executor state:D stack:21008 pid:8205 tgid:8205 ppid:1 flags:0x00000004 [ 404.840854][ T30] Call Trace: [ 404.847708][ T30] [ 404.850731][ T30] __schedule+0x1895/0x4b30 [ 404.862177][ T30] ? __pfx___schedule+0x10/0x10 [ 404.870001][ T30] ? __pfx_lock_release+0x10/0x10 [ 404.881262][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 404.891309][ T30] ? schedule+0x90/0x320 [ 404.900755][ T30] schedule+0x14b/0x320 [ 404.907727][ T30] schedule_preempt_disabled+0x13/0x30 [ 404.913258][ T30] __mutex_lock+0x6a7/0xd70 [ 404.923978][ T30] ? __mutex_lock+0x52a/0xd70 [ 404.932665][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.940728][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 404.952103][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 404.960793][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 404.970991][ T30] ? __lock_acquire+0x1384/0x2050 [ 404.980934][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 404.991668][ T30] netlink_rcv_skb+0x1e3/0x430 [ 404.999348][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 405.009807][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.017908][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.023188][ T30] netlink_unicast+0x7f6/0x990 [ 405.033299][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 405.052245][ T30] ? __virt_addr_valid+0x183/0x530 [ 405.058648][ T30] ? __check_object_size+0x48e/0x900 [ 405.070854][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 405.076426][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.081799][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 405.094283][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.099652][ T30] __sock_sendmsg+0x221/0x270 [ 405.112093][ T30] __sys_sendto+0x39b/0x4f0 [ 405.120048][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 405.132554][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.138999][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.152848][ T30] __x64_sys_sendto+0xde/0x100 [ 405.158511][ T30] do_syscall_64+0xf3/0x230 [ 405.163099][ T30] ? clear_bhb_loop+0x35/0x90 [ 405.177665][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.183671][ T30] RIP: 0033:0x7efddf77fdcc [ 405.191313][ T30] RSP: 002b:00007efddfa5f630 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 405.207509][ T30] RAX: ffffffffffffffda RBX: 00007efde0464620 RCX: 00007efddf77fdcc [ 405.219816][ T30] RDX: 0000000000000028 RSI: 00007efde0464670 RDI: 0000000000000003 [ 405.232951][ T30] RBP: 0000000000000000 R08: 00007efddfa5f684 R09: 000000000000000c [ 405.248982][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 405.260813][ T30] R13: 0000000000000000 R14: 00007efde0464670 R15: 0000000000000000 [ 405.284069][ T30] [ 405.287258][ T30] INFO: task syz.1.582:8250 blocked for more than 146 seconds. [ 405.301141][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 405.308977][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.323951][ T30] task:syz.1.582 state:D stack:27392 pid:8250 tgid:8249 ppid:7471 flags:0x00000004 [ 405.341820][ T30] Call Trace: [ 405.345574][ T30] [ 405.348579][ T30] __schedule+0x1895/0x4b30 [ 405.353298][ T30] ? __pfx___schedule+0x10/0x10 [ 405.363934][ T30] ? __pfx_lock_release+0x10/0x10 [ 405.372075][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 405.382083][ T30] ? schedule+0x90/0x320 [ 405.392295][ T30] schedule+0x14b/0x320 [ 405.400365][ T30] schedule_preempt_disabled+0x13/0x30 [ 405.410019][ T30] __mutex_lock+0x6a7/0xd70 [ 405.418558][ T30] ? __mutex_lock+0x52a/0xd70 [ 405.423315][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 405.432587][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 405.441677][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 405.452487][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 405.462116][ T30] ? aa_sk_perm+0x96d/0xab0 [ 405.471162][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 405.478754][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 405.489260][ T30] ip_setsockopt+0x63/0x100 [ 405.496973][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 405.502932][ T30] do_sock_setsockopt+0x3af/0x720 [ 405.514799][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 405.520426][ T30] ? __fget_files+0x29/0x470 [ 405.533893][ T30] ? __fget_files+0x3f3/0x470 [ 405.538657][ T30] ? __fget_files+0x29/0x470 [ 405.543309][ T30] __sys_setsockopt+0x1a2/0x250 [ 405.555629][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 405.560746][ T30] do_syscall_64+0xf3/0x230 [ 405.573123][ T30] ? clear_bhb_loop+0x35/0x90 [ 405.580848][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.592225][ T30] RIP: 0033:0x7ff1e957df39 [ 405.601207][ T30] RSP: 002b:00007ff1e93f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.621319][ T30] RAX: ffffffffffffffda RBX: 00007ff1e9735f80 RCX: 00007ff1e957df39 [ 405.639446][ T30] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 405.649338][ T30] RBP: 00007ff1e95f0216 R08: 0000000000000040 R09: 0000000000000000 [ 405.663456][ T30] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000000 [ 405.674018][ T30] R13: 0000000000000000 R14: 00007ff1e9735f80 R15: 00007ff1e985fa28 [ 405.682067][ T30] [ 405.693929][ T30] INFO: task syz.1.582:8251 blocked for more than 146 seconds. [ 405.701611][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 405.716536][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.732254][ T30] task:syz.1.582 state:D stack:27392 pid:8251 tgid:8249 ppid:7471 flags:0x00000004 [ 405.745320][ T30] Call Trace: [ 405.748650][ T30] [ 405.751624][ T30] __schedule+0x1895/0x4b30 [ 405.770196][ T30] ? __pfx___schedule+0x10/0x10 [ 405.778473][ T30] ? __pfx_lock_release+0x10/0x10 [ 405.783578][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 405.793504][ T30] ? schedule+0x90/0x320 [ 405.803923][ T30] schedule+0x14b/0x320 [ 405.808140][ T30] schedule_preempt_disabled+0x13/0x30 [ 405.813639][ T30] __mutex_lock+0x6a7/0xd70 [ 405.824752][ T30] ? __mutex_lock+0x52a/0xd70 [ 405.829498][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 405.841868][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 405.848548][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 405.853666][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 405.867799][ T30] ? aa_sk_perm+0x96d/0xab0 [ 405.873495][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 405.882843][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 405.891855][ T30] ip_setsockopt+0x63/0x100 [ 405.900215][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 405.910259][ T30] do_sock_setsockopt+0x3af/0x720 [ 405.920761][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 405.930523][ T30] ? __fget_files+0x29/0x470 [ 405.939175][ T30] ? __fget_files+0x3f3/0x470 [ 405.948217][ T30] ? __fget_files+0x29/0x470 [ 405.952906][ T30] __sys_setsockopt+0x1a2/0x250 [ 405.961798][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 405.970742][ T30] do_syscall_64+0xf3/0x230 [ 405.981728][ T30] ? clear_bhb_loop+0x35/0x90 [ 405.990429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.001547][ T30] RIP: 0033:0x7ff1e957df39 [ 406.009992][ T30] RSP: 002b:00007ff1e93d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 406.022409][ T30] RAX: ffffffffffffffda RBX: 00007ff1e9736058 RCX: 00007ff1e957df39 [ 406.035841][ T30] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 406.049001][ T30] RBP: 00007ff1e95f0216 R08: 0000000000000057 R09: 0000000000000000 [ 406.060328][ T30] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.073430][ T30] R13: 0000000000000001 R14: 00007ff1e9736058 R15: 00007ff1e985fa28 [ 406.086796][ T30] [ 406.089955][ T30] INFO: task syz.1.582:8252 blocked for more than 147 seconds. [ 406.103886][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 406.111307][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.127086][ T30] task:syz.1.582 state:D stack:26720 pid:8252 tgid:8249 ppid:7471 flags:0x00000004 [ 406.142982][ T30] Call Trace: [ 406.150253][ T30] [ 406.153325][ T30] __schedule+0x1895/0x4b30 [ 406.162463][ T30] ? __pfx___schedule+0x10/0x10 [ 406.171828][ T30] ? __pfx_lock_release+0x10/0x10 [ 406.181558][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 406.191121][ T30] ? schedule+0x90/0x320 [ 406.199252][ T30] schedule+0x14b/0x320 [ 406.203574][ T30] schedule_preempt_disabled+0x13/0x30 [ 406.218231][ T30] __mutex_lock+0x6a7/0xd70 [ 406.222916][ T30] ? __mutex_lock+0x52a/0xd70 [ 406.231980][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 406.241269][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 406.250310][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 406.259199][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 406.270094][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.279871][ T30] ? ref_tracker_free+0x643/0x7e0 [ 406.289969][ T30] netlink_rcv_skb+0x1e3/0x430 [ 406.298660][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.308318][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.313710][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.328902][ T30] netlink_unicast+0x7f6/0x990 [ 406.337757][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 406.343568][ T30] ? __virt_addr_valid+0x183/0x530 [ 406.353090][ T30] ? __check_object_size+0x48e/0x900 [ 406.362694][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 406.371623][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.380964][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 406.391069][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.402477][ T30] __sock_sendmsg+0x221/0x270 [ 406.411409][ T30] sock_write_iter+0x2d7/0x3f0 [ 406.419985][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 406.429305][ T30] ? try_to_wake_up+0x9d9/0x1480 [ 406.438245][ T30] do_iter_readv_writev+0x600/0x880 [ 406.443543][ T30] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 406.457006][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 406.462559][ T30] ? security_file_permission+0x74/0x280 [ 406.472959][ T30] ? rw_verify_area+0x1c3/0x6f0 [ 406.480790][ T30] vfs_writev+0x376/0xba0 [ 406.491079][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 406.499198][ T30] ? fdget_pos+0x19a/0x320 [ 406.503688][ T30] do_writev+0x1b1/0x350 [ 406.517073][ T30] ? __pfx_do_writev+0x10/0x10 [ 406.522093][ T30] ? do_syscall_64+0x100/0x230 [ 406.532210][ T30] ? do_syscall_64+0xb6/0x230 [ 406.539844][ T30] do_syscall_64+0xf3/0x230 [ 406.549778][ T30] ? clear_bhb_loop+0x35/0x90 [ 406.560401][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.573448][ T30] RIP: 0033:0x7ff1e957df39 [ 406.580771][ T30] RSP: 002b:00007ff1e93b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 406.593946][ T30] RAX: ffffffffffffffda RBX: 00007ff1e9736130 RCX: 00007ff1e957df39 [ 406.602080][ T30] RDX: 0000000000000001 RSI: 0000000020000780 RDI: 0000000000000004 [ 406.618786][ T30] RBP: 00007ff1e95f0216 R08: 0000000000000000 R09: 0000000000000000 [ 406.630881][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.643042][ T30] R13: 0000000000000000 R14: 00007ff1e9736130 R15: 00007ff1e985fa28 [ 406.653936][ T30] [ 406.661780][ T30] INFO: task syz.1.582:8253 blocked for more than 147 seconds. [ 406.671213][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 406.683964][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.700205][ T30] task:syz.1.582 state:D stack:27392 pid:8253 tgid:8249 ppid:7471 flags:0x00000004 [ 406.712136][ T30] Call Trace: [ 406.726842][ T30] [ 406.729854][ T30] __schedule+0x1895/0x4b30 [ 406.744175][ T30] ? __pfx___schedule+0x10/0x10 [ 406.749123][ T30] ? __pfx_lock_release+0x10/0x10 [ 406.761311][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 406.767306][ T30] ? schedule+0x90/0x320 [ 406.771615][ T30] schedule+0x14b/0x320 [ 406.783537][ T30] schedule_preempt_disabled+0x13/0x30 [ 406.791021][ T30] __mutex_lock+0x6a7/0xd70 [ 406.813900][ T30] ? __mutex_lock+0x52a/0xd70 [ 406.823132][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 406.831448][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 406.842038][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 406.851863][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 406.862444][ T30] ? aa_sk_perm+0x96d/0xab0 [ 406.869831][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 406.880284][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 406.888229][ T30] ip_setsockopt+0x63/0x100 [ 406.892823][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 406.903978][ T30] do_sock_setsockopt+0x3af/0x720 [ 406.909087][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 406.923609][ T30] ? __fget_files+0x29/0x470 [ 406.928669][ T30] ? __fget_files+0x3f3/0x470 [ 406.933412][ T30] ? __fget_files+0x29/0x470 [ 406.944320][ T30] __sys_setsockopt+0x1a2/0x250 [ 406.949256][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 406.962681][ T30] do_syscall_64+0xf3/0x230 [ 406.967579][ T30] ? clear_bhb_loop+0x35/0x90 [ 406.972498][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.983925][ T30] RIP: 0033:0x7ff1e957df39 [ 406.988422][ T30] RSP: 002b:00007ff1e9396038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 407.005182][ T30] RAX: ffffffffffffffda RBX: 00007ff1e9736208 RCX: 00007ff1e957df39 [ 407.013315][ T30] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000005 [ 407.029767][ T30] RBP: 00007ff1e95f0216 R08: 0000000000000040 R09: 0000000000000000 [ 407.041656][ T30] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000000 [ 407.053865][ T30] R13: 0000000000000000 R14: 00007ff1e9736208 R15: 00007ff1e985fa28 [ 407.061920][ T30] [ 407.073986][ T30] INFO: task syz.1.582:8254 blocked for more than 148 seconds. [ 407.081587][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 407.096470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.111039][ T30] task:syz.1.582 state:D stack:26720 pid:8254 tgid:8249 ppid:7471 flags:0x00000004 [ 407.124332][ T30] Call Trace: [ 407.127678][ T30] [ 407.131001][ T30] __schedule+0x1895/0x4b30 [ 407.143445][ T30] ? __pfx___schedule+0x10/0x10 [ 407.149943][ T30] ? __pfx_lock_release+0x10/0x10 [ 407.161302][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 407.168406][ T30] ? schedule+0x90/0x320 [ 407.172718][ T30] schedule+0x14b/0x320 [ 407.183769][ T30] schedule_preempt_disabled+0x13/0x30 [ 407.189383][ T30] __mutex_lock+0x6a7/0xd70 [ 407.203574][ T30] ? __mutex_lock+0x52a/0xd70 [ 407.208705][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 407.221412][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 407.226956][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 407.231952][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 407.245001][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.250543][ T30] ? ref_tracker_free+0x643/0x7e0 [ 407.264409][ T30] netlink_rcv_skb+0x1e3/0x430 [ 407.269253][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.282531][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.288342][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.293622][ T30] netlink_unicast+0x7f6/0x990 [ 407.307189][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 407.312545][ T30] ? __virt_addr_valid+0x183/0x530 [ 407.325057][ T30] ? __check_object_size+0x48e/0x900 [ 407.330426][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 407.343423][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.349193][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 407.361686][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.368704][ T30] __sock_sendmsg+0x221/0x270 [ 407.373451][ T30] sock_write_iter+0x2d7/0x3f0 [ 407.384292][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 407.389665][ T30] ? futex_wait_queue+0x14e/0x1d0 [ 407.400748][ T30] ? futex_unqueue+0xcb/0xf0 [ 407.406144][ T30] do_iter_readv_writev+0x600/0x880 [ 407.412166][ T30] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 407.423880][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 407.429374][ T30] ? security_file_permission+0x74/0x280 [ 407.448367][ T30] ? rw_verify_area+0x1c3/0x6f0 [ 407.453326][ T30] vfs_writev+0x376/0xba0 [ 407.460682][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 407.470987][ T30] ? fdget_pos+0x19a/0x320 [ 407.478357][ T30] do_writev+0x1b1/0x350 [ 407.482692][ T30] ? __pfx_do_writev+0x10/0x10 [ 407.493972][ T30] ? do_syscall_64+0x100/0x230 [ 407.498824][ T30] ? do_syscall_64+0xb6/0x230 [ 407.503559][ T30] do_syscall_64+0xf3/0x230 [ 407.515411][ T30] ? clear_bhb_loop+0x35/0x90 [ 407.520174][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.535287][ T30] RIP: 0033:0x7ff1e957df39 [ 407.539791][ T30] RSP: 002b:00007ff1e9375038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 407.553868][ T30] RAX: ffffffffffffffda RBX: 00007ff1e97362e0 RCX: 00007ff1e957df39 [ 407.561916][ T30] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000006 [ 407.577503][ T30] RBP: 00007ff1e95f0216 R08: 0000000000000000 R09: 0000000000000000 [ 407.589401][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.604030][ T30] R13: 0000000000000000 R14: 00007ff1e97362e0 R15: 00007ff1e985fa28 [ 407.619883][ T30] [ 407.622965][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 407.632639][ T30] INFO: task syz-executor:8256 blocked for more than 148 seconds. [ 407.648614][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 407.660887][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.674167][ T30] task:syz-executor state:D stack:25584 pid:8256 tgid:8256 ppid:1 flags:0x00004004 [ 407.691928][ T30] Call Trace: [ 407.695581][ T30] [ 407.698554][ T30] __schedule+0x1895/0x4b30 [ 407.703122][ T30] ? __pfx___schedule+0x10/0x10 [ 407.713863][ T30] ? __pfx_lock_release+0x10/0x10 [ 407.721553][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 407.733516][ T30] ? schedule+0x90/0x320 [ 407.740580][ T30] schedule+0x14b/0x320 [ 407.750581][ T30] schedule_preempt_disabled+0x13/0x30 [ 407.764143][ T30] __mutex_lock+0x6a7/0xd70 [ 407.768727][ T30] ? __mutex_lock+0x52a/0xd70 [ 407.773466][ T30] ? register_nexthop_notifier+0x84/0x290 [ 407.787775][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 407.792877][ T30] ? __asan_memset+0x23/0x50 [ 407.802506][ T30] register_nexthop_notifier+0x84/0x290 [ 407.811765][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 407.823236][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 407.832225][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 407.855444][ T30] ? __asan_memset+0x23/0x50 [ 407.861818][ T30] ops_init+0x31e/0x590 [ 407.871135][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 407.879265][ T30] setup_net+0x287/0x9e0 [ 407.883568][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 407.893980][ T30] ? __pfx_setup_net+0x10/0x10 [ 407.898826][ T30] copy_net_ns+0x33f/0x570 [ 407.903326][ T30] create_new_namespaces+0x425/0x7b0 [ 407.918131][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 407.929514][ T30] ksys_unshare+0x619/0xc10 [ 407.936831][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 407.941930][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 407.958720][ T30] ? do_syscall_64+0x100/0x230 [ 407.963589][ T30] __x64_sys_unshare+0x38/0x40 [ 407.976463][ T30] do_syscall_64+0xf3/0x230 [ 407.981044][ T30] ? clear_bhb_loop+0x35/0x90 [ 407.990785][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.999709][ T30] RIP: 0033:0x7f276d37f737 [ 408.009065][ T30] RSP: 002b:00007f276d65ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 408.022943][ T30] RAX: ffffffffffffffda RBX: 00007f276d3f198c RCX: 00007f276d37f737 [ 408.036039][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 408.049428][ T30] RBP: 0000000000000000 R08: 00007f276e067d60 R09: 0000000000000000 [ 408.061426][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 408.074139][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 408.082186][ T30] [ 408.093425][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 408.102907][ T30] [ 408.102907][ T30] Showing all locks held in the system: [ 408.118497][ T30] 4 locks held by kworker/u8:0/11: [ 408.123665][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.144138][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.162171][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 408.172026][ T30] #3: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 408.190983][ T30] 1 lock held by khungtaskd/30: [ 408.197755][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 408.215448][ T30] 3 locks held by kworker/u8:2/35: [ 408.220708][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.239631][ T30] #1: ffffc90000ab7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.255042][ T30] #2: ffff888065a48768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 408.271742][ T30] 5 locks held by kworker/u9:0/54: [ 408.278438][ T30] #0: ffff88805f197148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.297045][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.314922][ T30] #2: ffff888060f3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 408.332771][ T30] #3: ffff888060f3c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 408.344171][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 408.361580][ T30] 3 locks held by kworker/u8:4/61: [ 408.368908][ T30] #0: ffff88802e4ec148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.384155][ T30] #1: ffffc900015c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.404792][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 408.420821][ T30] 3 locks held by kworker/u8:5/744: [ 408.429583][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.450172][ T30] #1: ffffc90003537d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.464571][ T30] #2: ffff88805bb10768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 408.480992][ T30] 5 locks held by kworker/u9:1/4620: [ 408.489840][ T30] #0: ffff88807917f148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.508145][ T30] #1: ffffc9000d777d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.523679][ T30] #2: ffff888069084d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 408.542172][ T30] #3: ffff888069084078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 408.562611][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 408.572957][ T30] 2 locks held by dhcpcd/4896: [ 408.585146][ T30] #0: ffff888060ef06c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 408.603938][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 408.612854][ T30] 2 locks held by getty/4991: [ 408.625134][ T30] #0: ffff888032f3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.646270][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 408.663290][ T30] 5 locks held by kworker/u9:2/5226: [ 408.671848][ T30] #0: ffff88805b4ec948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.688164][ T30] #1: ffffc90003d7fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.703584][ T30] #2: ffff88803151cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 408.719916][ T30] #3: ffff88803151c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 408.733011][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 408.748869][ T30] 4 locks held by kworker/u9:3/5228: [ 408.757062][ T30] #0: ffff888068be5148 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.774701][ T30] #1: ffffc90003dbfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.794396][ T30] #2: ffff88806bd1c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 408.817123][ T30] #3: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 408.832879][ T30] 5 locks held by kworker/u9:4/5233: [ 408.843037][ T30] #0: ffff8880795fd148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.859635][ T30] #1: ffffc90003e0fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.874801][ T30] #2: ffff88807a9f8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 408.903014][ T30] #3: ffff88807a9f8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 408.913211][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 408.930609][ T30] 5 locks held by kworker/u9:9/5242: [ 408.936353][ T30] #0: ffff88805dd29948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 408.953949][ T30] #1: ffffc90003edfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 408.973628][ T30] #2: ffff888069100d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 408.984064][ T30] #3: ffff888069100078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 409.003175][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 409.014002][ T30] 6 locks held by kworker/0:3/5283: [ 409.019260][ T30] 3 locks held by kworker/0:5/5452: [ 409.032227][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 409.053046][ T30] #1: ffffc900049cfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 409.073299][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 409.083436][ T30] 3 locks held by kworker/u8:10/6706: [ 409.096271][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 409.113350][ T30] #1: ffffc900032f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 409.133899][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 409.143005][ T30] 1 lock held by syz-executor/7547: [ 409.156212][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 409.170424][ T30] 8 locks held by syz-executor/8108: [ 409.180569][ T30] #0: ffff88803310c420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 409.197350][ T30] #1: ffff88802762b488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 409.211052][ T30] #2: ffff8881413501e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 409.225159][ T30] #3: ffffffff8f570968 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 409.243354][ T30] #4: ffff888061e2c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 409.262782][ T30] #5: ffff88802132b250 (&devlink->lock_key#22){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 409.273901][ T30] #6: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 409.282912][ T30] #7: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 409.303230][ T30] 1 lock held by syz.3.575/8212: [ 409.308560][ T30] 1 lock held by syz-executor/8205: [ 409.313802][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 409.331412][ T30] 1 lock held by syz.1.582/8250: [ 409.343921][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 409.367701][ T30] 1 lock held by syz.1.582/8251: [ 409.372789][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 409.385636][ T30] 1 lock held by syz.1.582/8252: [ 409.390634][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 409.410365][ T30] 1 lock held by syz.1.582/8253: [ 409.419972][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 409.434057][ T30] 1 lock held by syz.1.582/8254: [ 409.439084][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 409.456699][ T30] 2 locks held by syz-executor/8256: [ 409.462151][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.478629][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.493237][ T30] 2 locks held by syz-executor/8262: [ 409.502589][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.516183][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.536340][ T30] 2 locks held by syz-executor/8264: [ 409.541702][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.561448][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.572039][ T30] 2 locks held by syz-executor/8269: [ 409.583950][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.593477][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.612367][ T30] 2 locks held by syz-executor/8274: [ 409.618200][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.635708][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.651299][ T30] 2 locks held by syz-executor/8281: [ 409.660521][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.676986][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.699480][ T30] 2 locks held by syz-executor/8288: [ 409.706462][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.723385][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.735320][ T30] 2 locks held by syz-executor/8291: [ 409.740677][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.758160][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.772271][ T30] 2 locks held by syz-executor/8296: [ 409.781622][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.796587][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.811122][ T30] 4 locks held by kworker/u9:5/8299: [ 409.820618][ T30] #0: ffff88808e667148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 409.845568][ T30] #1: ffffc90003d4fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 409.866209][ T30] #2: ffff88807e894078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 409.882597][ T30] #3: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 409.896398][ T30] 2 locks held by syz-executor/8301: [ 409.901753][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 409.917880][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 409.940117][ T30] 4 locks held by kworker/u9:6/8302: [ 409.951578][ T30] #0: ffff88808edcb948 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 409.968754][ T30] #1: ffffc90003e2fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 409.984211][ T30] #2: ffff88802442c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 410.003877][ T30] #3: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 410.024243][ T30] 5 locks held by kworker/u9:7/8306: [ 410.029603][ T30] #0: ffff888074d7d948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 410.048742][ T30] #1: ffffc90003d0fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 410.064325][ T30] #2: ffff88803345cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 410.085896][ T30] #3: ffff88803345c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 410.109576][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 410.121149][ T30] 2 locks held by syz-executor/8308: [ 410.134008][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 410.143627][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 410.164646][ T30] 4 locks held by kworker/u9:8/8309: [ 410.169989][ T30] #0: ffff88804cc65948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 410.189578][ T30] #1: ffffc90003ccfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 410.204951][ T30] #2: ffff88803ae28078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 410.222489][ T30] #3: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 410.233422][ T30] 4 locks held by kworker/u9:10/8314: [ 410.246771][ T30] #0: ffff88804cc67148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 410.263399][ T30] #1: ffffc90003c5fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 410.283885][ T30] #2: ffff88808732c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 410.301221][ T30] #3: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 410.313539][ T30] 5 locks held by kworker/u9:11/8317: [ 410.332079][ T30] #0: ffff88806baab148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 410.343654][ T30] #1: ffffc900034c7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 410.363927][ T30] #2: ffff888031c4cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 410.383581][ T30] #3: ffff888031c4c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 410.394370][ T30] #4: ffffffff8fe3e0a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 410.412277][ T30] 2 locks held by syz-executor/8318: [ 410.417974][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 410.437191][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 410.454224][ T30] 2 locks held by syz-executor/8319: [ 410.459578][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 410.477151][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 410.493894][ T30] [ 410.496281][ T30] ============================================= [ 410.496281][ T30] [ 410.513027][ T30] NMI backtrace for cpu 1 [ 410.517418][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 410.527626][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.537724][ T30] Call Trace: [ 410.541063][ T30] [ 410.544075][ T30] dump_stack_lvl+0x241/0x360 [ 410.548818][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.554070][ T30] ? __pfx__printk+0x10/0x10 [ 410.558811][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 410.563805][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 410.569304][ T30] ? _printk+0xd5/0x120 [ 410.573496][ T30] ? __pfx__printk+0x10/0x10 [ 410.578131][ T30] ? __wake_up_klogd+0xcc/0x110 [ 410.583223][ T30] ? __pfx__printk+0x10/0x10 [ 410.587944][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 410.593115][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 410.599161][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 410.605218][ T30] watchdog+0xff4/0x1040 [ 410.609511][ T30] ? watchdog+0x1ea/0x1040 [ 410.614006][ T30] ? __pfx_watchdog+0x10/0x10 [ 410.618727][ T30] kthread+0x2f0/0x390 [ 410.622831][ T30] ? __pfx_watchdog+0x10/0x10 [ 410.627555][ T30] ? __pfx_kthread+0x10/0x10 [ 410.632190][ T30] ret_from_fork+0x4b/0x80 [ 410.636660][ T30] ? __pfx_kthread+0x10/0x10 [ 410.641299][ T30] ret_from_fork_asm+0x1a/0x30 [ 410.646139][ T30] [ 410.649798][ T30] Sending NMI from CPU 1 to CPUs 0: [ 410.655434][ C0] NMI backtrace for cpu 0 [ 410.655451][ C0] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:3 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 410.655472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.655483][ C0] Workqueue: events nsim_dev_trap_report_work [ 410.655509][ C0] RIP: 0010:unwind_next_frame+0x6d5/0x22d0 [ 410.655541][ C0] Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c 0f 46 f1 48 [ 410.655556][ C0] RSP: 0018:ffffc90000006b50 EFLAGS: 00000a07 [ 410.655571][ C0] RAX: 0000000000000000 RBX: ffffffff902cc76c RCX: dffffc0000000000 [ 410.655584][ C0] RDX: 00000000000b0001 RSI: ffffffff90a1c4ca RDI: 0000000000000001 [ 410.655596][ C0] RBP: ffffffff902cc76c R08: 0000000000000007 R09: 0000000000000000 [ 410.655608][ C0] R10: ffffc90000006cd0 R11: fffff52000000d9c R12: ffffffff902cc76c [ 410.655621][ C0] R13: ffffffff902cc76c R14: ffffffff902cc76c R15: ffffffff81379364 [ 410.655635][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 410.655651][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.655663][ C0] CR2: 0000001b2e407ff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 410.655680][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 410.655691][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 410.655702][ C0] Call Trace: [ 410.655709][ C0] [ 410.655716][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 410.655743][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 410.655771][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 410.655796][ C0] ? nmi_handle+0x2a/0x5a0 [ 410.655821][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 410.655844][ C0] ? nmi_handle+0x14f/0x5a0 [ 410.655860][ C0] ? nmi_handle+0x2a/0x5a0 [ 410.655877][ C0] ? unwind_next_frame+0x6d5/0x22d0 [ 410.655903][ C0] ? default_do_nmi+0x63/0x160 [ 410.655930][ C0] ? exc_nmi+0x123/0x1f0 [ 410.655954][ C0] ? end_repeat_nmi+0xf/0x53 [ 410.655975][ C0] ? arch_stack_walk+0xe4/0x150 [ 410.655998][ C0] ? unwind_next_frame+0x6d5/0x22d0 [ 410.656024][ C0] ? unwind_next_frame+0x6d5/0x22d0 [ 410.656052][ C0] ? unwind_next_frame+0x6d5/0x22d0 [ 410.656079][ C0] [ 410.656085][ C0] [ 410.656095][ C0] ? arch_stack_walk+0xe5/0x150 [ 410.656116][ C0] __unwind_start+0x59a/0x740 [ 410.656144][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 410.656166][ C0] arch_stack_walk+0xe5/0x150 [ 410.656193][ C0] ? arch_stack_walk+0xe5/0x150 [ 410.656213][ C0] stack_trace_save+0x118/0x1d0 [ 410.656234][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 410.656255][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.656282][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.656310][ C0] kasan_save_track+0x3f/0x80 [ 410.656352][ C0] kasan_save_free_info+0x40/0x50 [ 410.656376][ C0] __kasan_slab_free+0x59/0x70 [ 410.656393][ C0] ? skb_release_data+0x6a0/0x8a0 [ 410.656416][ C0] kfree+0x1a0/0x440 [ 410.656437][ C0] ? rcuref_put+0x1e3/0x240 [ 410.656458][ C0] ? skb_release_data+0x6a0/0x8a0 [ 410.656483][ C0] skb_release_data+0x6a0/0x8a0 [ 410.656512][ C0] consume_skb+0x9f/0xf0 [ 410.656534][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 410.656558][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 410.656581][ C0] ? nf_ip_checksum+0x13a/0x500 [ 410.656605][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 410.656628][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 410.656647][ C0] ? validate_chain+0x11e/0x5920 [ 410.656668][ C0] ? __pfx_validate_chain+0x10/0x10 [ 410.656692][ C0] nft_do_chain+0x4ad/0x1da0 [ 410.656720][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 410.656739][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 410.656775][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 410.656801][ C0] nft_do_chain_inet+0x418/0x6b0 [ 410.656822][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 410.656841][ C0] ? ipt_do_table+0x312/0x1860 [ 410.656870][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 410.656889][ C0] nf_hook_slow+0xc3/0x220 [ 410.656907][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.656933][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.656958][ C0] NF_HOOK+0x29e/0x450 [ 410.656983][ C0] ? NF_HOOK+0x9a/0x450 [ 410.657005][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 410.657030][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.657058][ C0] ? ip_rcv_finish+0x406/0x560 [ 410.657084][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 410.657108][ C0] NF_HOOK+0x3a4/0x450 [ 410.657130][ C0] ? __lock_acquire+0x1384/0x2050 [ 410.657157][ C0] ? NF_HOOK+0x9a/0x450 [ 410.657184][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 410.657207][ C0] ? ip_rcv_core+0x801/0xd10 [ 410.657232][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 410.657260][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 410.657284][ C0] __netif_receive_skb+0x2bf/0x650 [ 410.657312][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 410.657337][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 410.657362][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.657387][ C0] ? __pfx_lock_release+0x10/0x10 [ 410.657412][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 410.657438][ C0] process_backlog+0x662/0x15b0 [ 410.657458][ C0] ? process_backlog+0x33b/0x15b0 [ 410.657480][ C0] ? __pfx_process_backlog+0x10/0x10 [ 410.657496][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.657523][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.657551][ C0] __napi_poll+0xcb/0x490 [ 410.657579][ C0] net_rx_action+0x89b/0x1240 [ 410.657606][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 410.657624][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 410.657665][ C0] handle_softirqs+0x2c5/0x980 [ 410.657690][ C0] ? do_softirq+0x11b/0x1e0 [ 410.657713][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 410.657740][ C0] do_softirq+0x11b/0x1e0 [ 410.657761][ C0] [ 410.657766][ C0] [ 410.657773][ C0] ? __pfx_do_softirq+0x10/0x10 [ 410.657795][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 410.657822][ C0] ? rcu_is_watching+0x15/0xb0 [ 410.657841][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 410.657864][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 410.657883][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 410.657906][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 410.657928][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 410.657949][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 410.657975][ C0] ? process_scheduled_works+0x976/0x1850 [ 410.657999][ C0] process_scheduled_works+0xa63/0x1850 [ 410.658036][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 410.658064][ C0] ? assign_work+0x364/0x3d0 [ 410.658089][ C0] worker_thread+0x870/0xd30 [ 410.658119][ C0] ? __kthread_parkme+0x169/0x1d0 [ 410.658145][ C0] ? __pfx_worker_thread+0x10/0x10 [ 410.658169][ C0] kthread+0x2f0/0x390 [ 410.658191][ C0] ? __pfx_worker_thread+0x10/0x10 [ 410.658214][ C0] ? __pfx_kthread+0x10/0x10 [ 410.658230][ C0] ret_from_fork+0x4b/0x80 [ 410.658254][ C0] ? __pfx_kthread+0x10/0x10 [ 410.658270][ C0] ret_from_fork_asm+0x1a/0x30 [ 410.658303][ C0] [ 411.380108][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 411.387059][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 411.397255][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.407352][ T30] Call Trace: [ 411.410661][ T30] [ 411.413628][ T30] dump_stack_lvl+0x241/0x360 [ 411.418358][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.423601][ T30] ? __pfx__printk+0x10/0x10 [ 411.428242][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.434289][ T30] ? vscnprintf+0x5d/0x90 [ 411.438680][ T30] panic+0x349/0x880 [ 411.442621][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 411.448833][ T30] ? __pfx_panic+0x10/0x10 [ 411.453291][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 411.458713][ T30] ? __irq_work_queue_local+0x137/0x410 [ 411.464310][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 411.469756][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 411.475988][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 411.482207][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 411.488430][ T30] watchdog+0x1033/0x1040 [ 411.492806][ T30] ? watchdog+0x1ea/0x1040 [ 411.497271][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.502004][ T30] kthread+0x2f0/0x390 [ 411.506111][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.510828][ T30] ? __pfx_kthread+0x10/0x10 [ 411.515454][ T30] ret_from_fork+0x4b/0x80 [ 411.519930][ T30] ? __pfx_kthread+0x10/0x10 [ 411.524566][ T30] ret_from_fork_asm+0x1a/0x30 [ 411.529392][ T30] [ 411.532737][ T30] Kernel Offset: disabled [ 411.537082][ T30] Rebooting in 86400 seconds..