last executing test programs: 16.726724032s ago: executing program 2 (id=661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getpgrp(0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x24, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) 15.950886057s ago: executing program 2 (id=665): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000004c0)='./file0\x00', 0x105) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00') syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000d80)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0x4}, @mdlm_detail={0x4}]}}}}}]}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="64db276c3077a6709d6bb95646b6b5874147751afb27a383a247316c3030b3de83da212cc068a04d8b5432f1daaf", 0x2e}, {&(0x7f0000000040)="e170c11cef3ec61c5363c9a10c5e5d185c60aa3c53e31d0b81250e2cb5118343ae79022a3839a479ae5cde0edb760528f8fd0f2007f25dcbeeef11c9390812d910161f9d5e4c67cc71350dab162ff90e5fbce6ba107e00587fb635a4c9984bc45412a89b4613169762c6d83ce69823345742eeab2f34712f2c2513eb1d83d46d84cee16c4fa326b3e78f1949b240234cf99b2bd012fa83ae6e101d91c2d46c8dc47aeb", 0xa3}, {&(0x7f0000000100)="24d0ea9dacb6642a1cbc28c66753b4b2c9", 0x11}], 0x3, 0x2) 14.258518094s ago: executing program 2 (id=675): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001040)=@get={0x1, &(0x7f0000000040)=""/4096, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000003280), 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001100), 0x2) r1 = memfd_create(&(0x7f0000001140)='\xaa\xaa\xaa\xaa\xaa', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000001180)={r1, 0x1, 0x100000000, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000c00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x3, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x376, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x340, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, 0x0) 13.988765022s ago: executing program 2 (id=677): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004d0000002700a800496adf2963f156bee0ce1ba7406ff82d0aa6f2eafc0000006c84e9fc463e0188c80036769129d0515ccf4631d3dbdc265894907de8e79ea6280d07f648c667f0869de58a9d13885d118ef60b70804716641079a4c591776c188be31861f181440cfa52801ff34d4865294203aeae7b7e07e61e26afddc9efee68a59fc7b07a68d45dea7a65f49c401cc48a5df28e0a3ae6ca224e455be33aaf02a0bad3d6dbbfd9542e1be5592efdc54cf2f96189c804b442e2a9d1a2e1"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffeff}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x40}}, 0x20040000) 12.416944369s ago: executing program 3 (id=685): openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x83, 0x4) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0xfffffffc, @mcast1}}]}, 0x78}, 0x1, 0x7}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x100001ff) (async) listen(r2, 0x100001ff) signalfd(r2, &(0x7f00000000c0)={[0x0, 0xfffff000]}, 0x8) sendto$inet(r0, &(0x7f0000000140)="eb", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)="eb", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 11.354792073s ago: executing program 3 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x224f743e, 0x6, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0xc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x182000) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r5, 0x80045515, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r7, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r4, &(0x7f0000001340), 0x0, 0x10001, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800290002003125fdd20067907800000000e000000121009000e0000002ac1414aa"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 8.556746853s ago: executing program 3 (id=697): r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="120100000109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000001905810300020000000904010000020d00000904090102020d0000090582020002000000090503020002"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dc000000000201040000006585980000000004000000005c0003802c00018014000300fe88000000000000000000000000000114000400fc00000000000000000000000000000b9700018014000300fe80000000000000000014000400000000000000000000000000000000003c00028000000340000000000c00028005000100000000005dff01802c00018000000100e000000100000200ac"], 0xdc}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x3, 0x101d00) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000380)=0x400) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r3, r3}, &(0x7f0000000200)=""/89, 0x59, &(0x7f00000001c0)={&(0x7f00000000c0)={'md5\x00'}}) (async) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000000)={0x1}) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r3, 0xb6, 0x7f}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f0000000140)="63df5dafd740d15783c9b75f243216b72bda6ffa64f40076c1a526f3dbb0cf1969fcea65b59b91e24c76df6c94c40a47d22e12bf7e10c226acbec99a9d20e77ec9aa18c69a1368a9bcaa4d44029ef81972814623bb5872eb2a4cbcbaa8d9566520a2eb4bf509a38be929dddeb8df56c04ff68be0c55fcf16ab8ddab68400fe50def9c17b4212d3482e89deb1b90649f253457e7ba76ddf731bba52ab98ba3a85002218854c7ca51a0047570e717e7cf88e2c25aa380d", &(0x7f0000000240)=""/127) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {}, [{}]}, 0x2c, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'dvmrp0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=@bridge_delvlan={0x84, 0x71, 0x300, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x53, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x9}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x44, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) unshare(0x2000400) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r8, 0x80045519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYRES8=r9], 0x3c}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000000)=0x4000000) syz_usb_control_io(r0, &(0x7f0000001f00)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00030a0000000a03916f2f78d9fd0c7d279d229d799911c86889c5d36f91ce85ac2443bbbd01b94f8ebea7d5588dffa5413a7dcc2041694d9e764ba06cfe87daf56501530a7b8cd1d71babdcc49fa076a5b266d8a520120a00c5e5baf3049c542b5966844538675424a7d6efea8a92480ea6e27b4f9521774f3bbe5507385c0e2e6448b1cf28e057d2854b405f10834d2d371cfd700044719a29ab481851552a18175619f4f9c0e31efd1591672ac5a3a914fa4f70b0e5696345959b3738dc13"], 0x0, 0x0, 0x0}, &(0x7f0000004400)={0x84, 0x0, 0x0, &(0x7f0000002040)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.567340436s ago: executing program 0 (id=701): syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x224f743e, 0x6, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0xc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x182000) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r6, 0x80045515, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r8, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800290002003125fdd20067907800000000e000000121009000e0000002ac1414aa"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 6.755172669s ago: executing program 1 (id=706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) getpgrp(0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x24, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) 6.135136381s ago: executing program 1 (id=707): syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x224f743e, 0x6, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0xc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x182000) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r6, 0x80045515, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(0xffffffffffffffff, &(0x7f0000001340), 0x0, 0x10001, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800290002003125fdd20067907800000000e000000121009000e0000002ac1414aa"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 5.386109038s ago: executing program 3 (id=708): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x6}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x1ee, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xe, @mcast1, 0x9}, r3}}, 0x30) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.019893391s ago: executing program 0 (id=709): socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, 0x0, 0x0, 0x4}, 0x90) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 4.419657866s ago: executing program 4 (id=711): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x18) ioctl$USBDEVFS_RESET(r0, 0x5514) getsockname$packet(r0, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000d1a7126f58f01e7e16a8ee1000010000000000000000000000000a38000000060a0104000000000000000002000000040004800900010073797a30000000000900020073797a32000000000500074049000000140000001100010000000000000000000000000a"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) io_uring_setup(0x333c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) write$sequencer(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="162067", @ANYRESOCT=r1], 0x8) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x44) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x40, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0xe24, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000001c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x200c0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x141, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) io_submit(0x0, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x9) 4.352152135s ago: executing program 3 (id=712): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200), 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0}) 3.95083904s ago: executing program 3 (id=713): syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022b0000100000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000001400)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r3], 0xc) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a800008100000000040100d2"], 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206010300000000000006000000000005000500000000000c00078008000840000000580900020073797a300000000005000100070000000d000300686173683a6d616300000000050004"], 0x54}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x34f25e, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x203, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000014c0)="16ffffffff43e9b96c3d53262f69f815932b3c8ec2413fd15216ebd4165e6b2270d7d179bc2f93da82b682825deceda3ea99e140d531f83ade12ebec45d7854aa2aadc9a6483fd023d0ac4ef6033d500e499773a55efa7400337b7438672c7bc8fbb119de6341726972443d1b153e99909608035d155c6ec82f1e38b0fc3d79cc98e9c9949e42aedc4825066091b20ababc48da3c10bd29d9bf8dd8de0b58961981cc1246edb81a9fd388f97ecf1d700ae3d5cd62aff0892cd06e45496625baa42394a244c2c03757c02731d17bfbad2ada5", 0x8002, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000004c0)=""/4087, &(0x7f00000014c0), &(0x7f00000024c0), 0x3, r5, 0x4}, 0x38) 3.91318581s ago: executing program 0 (id=714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'ipvlan1\x00', &(0x7f0000000f40)=@ethtool_sfeatures={0x3b, 0x1, [{0xaaa5, 0x6}]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x7, @loopback, 0x101}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x14}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa4}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r1, 0x0, 0x0, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x5410, &(0x7f0000000100)) 3.303321237s ago: executing program 0 (id=715): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3080000000000007b8af8ff00000000b5080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) 3.280387133s ago: executing program 2 (id=678): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 'veth1_to_batadv\x00'}}, 0x1e) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.226349379s ago: executing program 4 (id=716): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) (fail_nth: 9) 3.153829856s ago: executing program 0 (id=717): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000000)={[0x0, 0x5000, 0x10000, 0xd000], 0x1, 0x10, 0xfffffffffffff890}) (async) r0 = openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x40, 0x0, &(0x7f0000000100)=[@request_death={0x400c630e, 0x3}, @enter_looper, @acquire_done={0x40106309, 0x1}, @enter_looper, @exit_looper, @clear_death], 0x96, 0x0, &(0x7f0000000140)="11e6dfca0397fc0d0526980231f2e81eb2bcdc8ab6529c5a57ff53828f816ba9d1fd15dc4f8513bff02af7bd51665ff2098d0c652357b87ad7af7ff916cd9851e951b674d9c235835f9d409766798d63fa4e3793575c421080cea8c62231fdcaad09c7b28d4d1a393be60228809a2cd6033a7e271c3a74e4236ab9e35abb94bcac65e47e5d379dcb4411ebfe2fb33a62c6c5e86d705e"}) r1 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)={0x54, r3, 0x80d, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x10}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 2.522976783s ago: executing program 4 (id=718): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000103a"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x2000142c) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) close(r1) (fail_nth: 6) 2.431322625s ago: executing program 0 (id=719): syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x224f743e, 0x6, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0xc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x182000) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r5, 0x80045515, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r7, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r4, &(0x7f0000001340), 0x0, 0x10001, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800290002003125fdd20067907800000000e000000121009000e0000002ac1414aa"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 2.345111596s ago: executing program 1 (id=720): socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000030a05000000000000000000050000030900030073797a30000000000c000480080001400000000408000b4000000004080007006e6174000f000c000ba2af6a86a4c478d2436a0034000000000a03000000000000000000030000010900010073797a30000000000900010073797a310000000008000240959e9d4e28110000090a0300000000000000000007000005e01011800b0001007461726765740000d0100280041003002d9c81833094bca58e0ca3167cf29b2528c2c51a446be496c935d9ab0a0053a78bd35400b3223aa873bad7957e5bb294c806a57304bdcefbf9a8c34ddeeef068d98c0047124de48f772daa59c339c0141118a39bdc91fb6dc17e9fbd0b8773c2c4ff6901b164e7de0ac18d8804c4ea7e4875a6df52afbddd3985adce967455fac76817361129e7682cf6f4eca072c4edae2d2b6b06a1cb0c986cda64e524f05c89f3f250e43bbcdbe420a442556204dcf0b93552fe4fa61004faca7cb8facf0faad71d62e7c91fc4cea4d170dd4e541821bd438877f52ca376820050e5ea18c9eb3a91a167e0c6ee44d07c899ea560c960eea31386da38338c3372c049d456415040f0a7bfa6b12d3eb7cc28d5b07ade22682d41a1ffdc44fc22e45feee1a8fcdbffb81576af12ff29cb08b612fe7be177b2ce7258e1fb1e5aba1594c31faf91608821d62841ee98cb8d9f858d260fce9808f11229ef428c6a453edaeba15b819bddcedb47419152c2505e42e1bb5a9979941fab5aa56648499fc653b09b62643adbdc607b77a826b41b7632dec5263814e388c883ae19c097617763b73415d573616864581220874c736753432d17839ef82a2d93578760cd482cc1e5f6e2f7c7d3704d3d526d9c971573cbf986eec4b2961cc0359b6bfee75d4429e642352fd1025daa2ec21b45c9a75c231343d591b579522d5d021edd932ca0a3aa5e52df50376abda17ef3ff793602f0ba2fd936ab644b9356292c56f1b68a10926d7b1ddeacb3f2d2f74a4be4d9485cfba046a611219f1d4fcf2f8a63d815e07a04fcc82f294c1a62ea16bfcfc4c1efc640d5146773941e4c122a9b63a6ae35a138053d6a198c21a6e694d1980d5bbbcd86c7844461f712462cd75b879cfc69423562e56cce94d2ce954eda02203545af632f2b6be04ee11d4973a1ce78695520ce2e00c4142b9a15683d90ed41bb3b9d774926ed16fd45f5547fe106ec3173dab6f0dc8307fadc927b3691215bd13085cf752b6d6eb3c3fdfb2fa62145e30a404e80b62dcacc2de91d0498f5db49e59baa30e45dfd6d644cf9ceb3b2a40c4147039f5e85a8c936681ade02fe376ef605af3b43998589680d488ff8fa44b3baea893e840dc9c6325d76eefafac327675ee7859cdb22342ae7fe9ac0cee5292d46146931e0a3c306fe15be735adf61b486dbce5db7d23dd3f49a1da3f342840bc31c822654581b53c4fe3f69522fce83e61b1628a5985a2d21822b91f37c6d4a9d7583a384fd766ec2593301268f520e67bd16da983b40edb4cab4a89518b5f8645ef48fb38db676220ce23e2e6efdf67b309cc609b627558958f4a7d62c1ca7dcf8f8e404bbf2448687a64132642e122e35506970a2b35482f9c37f31e8af81cbe834af0649ce2e3ba521e4c19877c1cf66879499b69250dc03dd9bfa6c3e0119b080a446c561c6776d811a2719f74f6f5f873e56afd55d8ef07aac4b2af854ede8a7031609d3c7bb7ae4270d6e0fac40d94df01a2a89fbcec874d5573fec0eaa9416579e38cc62ec024463672a093c711ca51eab33d021091cf2519ffb830c12d8bb1e942190df51e89a97d9f5323e3a9d532d8aa0eb727df054311fdc4061f06139f5d4588a2c246bce0f6a3cd968eae41c94c5231ac53ef1e38fda3c70cd1364864504e455a2d7ca8a846d57087b3939725c0348ac03884da745e4dca49e2f816d07e095d7ce3c1e2a8db532e8e92da47d3d46fbce39705ee22ede2ecd7147911bbc37057582e9d0d3c6a0672e5ee5fb13a090552beb78ae46f05d2aed988ffe664ba9c550a8b91994cbddb5a8dc7863d76dbb430b571af64f8707588cd2065f3b0a45508b67d8c5829c081c5b7e2362141471c9ccd0c2ea21066cf1784ffbc18f7bbbe7587318d2616ab0a12488b9da7974550c9d195cbbb6f607736c5140107a2bc77569393be81ff0890ef289bc4e1b54a41e8a9d27e1e095db8caf1dc7782260f751d249e86beb4ff446449e4976fd14170983712bbf2b9df5946a207c5415fd38892a18dafc643e6f3cf0f6a8e1c13d1841b84a3df56e7dc6f262cc97bb5fc7b51e9c7101c8b6fa75b3608aba45aa13a03ac3f95167af1e0a237c855fb047013abd6a90929c6009be303d352e5d6bb3f878f2294c9d7968de555f92bcda8ac72e46cb4df75aec755e5b2069c92cc46f01d11ada01aec06af7f95c85d57147db28ad8791dfc13882ec356abb0856c8acadf9a50d619c45b484b79e276757121a5e3ff80776e4cfe29ee4b248b6825629314e383477f66e5bd7efa23e38397fbf39b6d21487ded5dd10ffc3dbb1c74fd1da9cd2f82ab5956a1b8262df716351325e77e645180c08ee03eb38f0f715693d8b814da1125d41438fe155ee335fce9c4ce46b6f746f2393c7fed1db3c2273c13008aa3435cd4e043af24902cf63ff565ea8210a32d88c4772f9309c6aeae9ea67a1911a6255f9d5d6b51551ecf33b7e6c2a67e86520771a5be38b67697b450d255483a982762c3b452efe5099b5a26f984d1acaf4d721e6c0e6d198cc2f378e0fda49549b9ea0d05203f950eb3734a505d99f57f92c3b769cdfe38a2952ae8ed7f7e6f8f0c1ef16b1baa6b14d231300b1227b8ede3462e51bb21583227af8a2708a2b70b6bdd42c0d8c7c42461dcdffef82f7f14d0bc14b117fcb1ba110a63a03440ded0bd666dd359dd2ca3aedd294226604abbdac519d87770185428578c2fb2b48a930391274df7c3b33b287912424e3f5667373c7f1e4b3690ec9add323a9eafec82a2a662b07345011ecb74d3a369a42e51c54bed8122d7b0551ebb8a374e84648eb136e67d42217f8158c4be03c3aea79854da4ee1c1b545ec7ea075287ef9c92a891bd6caec50408bc7f797d964f6d5ea5e6b49b773525a7325af2bab1509758bf6254e8d822b369542cf7ecadab4b4a1c51981584b28db395954ad4dfc9d3f1bea84a46991965433b7154e84b4287799550caad47eeefd50fb8d70b78a34bc82b579d413b7b45d25dad4126e93bd722cba23232872ef6466e0b8ccfd10a5df89f0e75b9456e04a08ce9eccfe78ad6ecae44585212a058da2102997f8dc77366470260d654259e68dd54a0d702f333be8dff1cb15992c4f1b508b1c2735d176c5de2ce9ee087f2a247486d0dda7cff85a60007762bcb0f01d93b8828d709926c9bb2bfda5b740ced69a21d161b5b2e5e54f30272520c130e0e7ec9d6618adbfcd6c79034cf720987be96865437f35f1002cb25856b7fa1402b2f40a9864083a22bf4ebef8dc038f40b31b051639d18d28bf2e2b0d209bf1d533d175f8d3ec5ada015276fca7c047aa7d114b6fe47b2381136c2a5292581cebe817e793dceeb09efc18b10dc463e888ab2286f59936e3f9f4d3e5e280c131102943b5100329072c16b738536817ee17da2b092a970615625db85129929f82df33b77c3c6ce83c7ae9e5a090cb952a5fe34034aa10955529aaae77b8869a9c1e3d6f610612d64e97b612c293dd6d40a0e8308a0456a4e65771e2de01daca294b2ee827052e7690a5b0ddd3d13fd9549eeabd0aa8edcb44f19ed4f46525cfa4f73e165194163045e986768e1ee8e40c596a0a3eeba56f14f709db875e73880d33592ba303e35bc893b68f72cb9bb918df7796a7743c926a0f7eacdfd1c09c689dfc3d5253aa91b45de9fb37feaf902d4a99f1d539978b74bfb4503448b1ef7cb64ae249ca69bda5ac9cea2716b2d2d3d4d38ff14c8aa2c91f0a45c034501ed70e37d6cdac0f0ec2da2f4351780db75683ef981e9fd4c7dacc45a80f738c3351377c877905b7c611fff70211e2cfe6c349e4724c2064e471818794ba2f8fc8f615ed6407beeedd181aa38eb23f6ce3c076f25fcdf4c39502f8bae94b357331c43169b53d9aaa263ee74edd8734e224c2f7d9fbe6afa29d4184eb45ff0dd6cd8b64c872b5e710242fc5279c3a46cf1c5d8a313b9670d5422915db418c173b27ff6ce4763164cd2c24e313f3c99fcdadac81ba29f94ac3dbb638a42df22f7c8bc6ac980a14180d635c152b6c4287229f62f2bfdd9f18168087039e011068bfe07115373767fde75758e128b79d3b694a6b562eb025b8f05acdc26ee540ef00c6e586d8ee185554c4d5785dc93eac47df6f8a294ced0ac1abb1d794dbb172140f8c9a555590f27c3fa1ec2ebca4a903c3ddce48c7e76d70db47355c1164b43aecc2bb51dc06190f15837d9a48927e9368519138745990e5c2d71cee896142f0ae03e9baa76fd12dcab129afe34ca35d5159ae6c62dfc4a0bf988c9fa00719c474f3f6bf56385397df082b6a9be6ca92f12d7eb4fd1cc67c754dda739f54c0e16b2a8ae9a241a95715d9ef38ade559848bd8e7ad6e8a8819a383a6d5f1f5a469f6e8db79e12f27b164817706880f31f8d12aa16992b2f1d34254fafa2fd17856c78691190161b5585c6a1d7a1c20094ccc49eb1f66230d6cfc5e52ccb00610b3768db471c1b41914b8fe7451d1b0dc9819a66d1d805254e7bec444252d9aff48a07d5bb78ba087ac76099bd2ccca6102414a269c3a8f287df0ef563c63055698708a28a08282411b2687e42f833827971ec1a63b431880cbc8249db36a7cf29d6a7689780610589fa8acf65040017efa5721e371d94734a9089706d1bf56c8e6be98d625d578978ac2bf8f9eb182c6f087bee878fb769d3819608fc024cb668399171ad2bcbc0b93948fe15935cec1a4a1d21cdab7a7153e6a1e94d873d3589b48bd429cdb0934be489ac2745d26e7c93cfeb2c75090d1c502f97cbcf585e60f8445f3241f79c32603177c972466a084a451c7dcaf8248f77172456ef6336b314c292e6140dae03991ef7256865fd3be6ff837ee7b0c87f4cae192a253f13d686ec63e6731a85fb843d3ffb077b4bd9eab933d395693b718237997acf3358a418366716df438768fd6d2181dd9ae6ea103d6a8d8d64b72abd8e8e6d9607238ee7ca59a8453a87d45a1408256f216b4d1fce49fd65500d204518031d211b2257e76f1873912cbb3644ae4c5b376686a8cc47cd19e1d32e972d1f81ba0f365cdb3b33310c47f1485a2cb870ac852a35eded53a4f8f3c4da1de6aa17e7aca78cf7fb88b9cc43a88d4efff93ce78152730a9f4e729b57c9fa9f446d53a627b76fb5ccd23ae08ffb428b0cd3e6408a3b028d72cf2faf040d5f64873dd8b1bebf5580baf3f3b7a1e58e95ed150aae3445fc7e70a23c69cfbd8e493bd48b5745c3ab9ca974b72290d92cdfc7631e81aa185fa0e93102fc11a337ba21d3ece2f91e00b85154cbc3eab0bfc138240f3b3dcfc72568b6e75e78101a562ee39aed813ea51d52ec8487a8cef603b9a5d4ab88a4d1a5294e9c32ad6a8902c19f565bfe1f15f554f58ac2b86ecad580dfd530e9c72c466c8ad8dc1c83b49b453911138b8dd00eb06ed2d64106e5e0ffab617aed91afcec75697e53ecffe05dd7594a75455530b9456ea2559f94ed5a7b6101ce8c496326a19c0d660b7f21dd86f6657ddede0def32db1cff2e142a6cb3d663ebf54267730ba59c998f8cec32115cfe88c41a43b1fe37d5a7ac4c798ac85536c0eabda9f9edcc09f3213387437d66292ec69cfb10a45cc0a196285fcd2e8fbd129b33f3e6b95a02d2b9ef67d0f5e2feeda087957e4486343f4aed598ec999d5f2863264bfd6ed195bc0e4036d85c7aff9f7382dbe7fb9dfc6c2714b374250803537e7a8c1dd66a6b37714d42b2d2cffaea9c7b57918c340f4c33660e3f009b5dd64af800af87c81f2cf3e00c0001006465766c696e6b000800024000000081b10003007277e04b1bfb5f3bf930a36f8d19f7811120979821fedc20c5a45819e59a03c8bfa273dade545075671993edabd331380a1c7ea1828c51021cee36cb24cb9ebe6396ac26c14692a3217870c54cf775741c3062ab61c7a1bbe053fb7c92c25512c22e918ec4dc701f54e1ae43c46dff139bbf61386d73bee4e460746f007ce023d413014de0258f238899680b11a57630286d290350f59fb92add96ec2714f7685153125cd5c500000008000340000000660800074000000034080005400000000208000c4000000fff14001180090001006d6173710000000004000280140000001100010000000000000000000000000a00000000000000"], 0x11d0}, 0x1, 0x0, 0x0, 0x60010}, 0x4040000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004d0000002700a800496adf2963f156bee0ce1ba7406ff82d0aa6f2eafc0000006c84e9fc463e0188c80036769129d0515ccf4631d3dbdc265894907de8e79ea6280d07f648c667f0869de58a9d13885d118ef60b70804716641079a4c591776c188be31861f181440cfa52801ff34d4865294203aeae7b7e07e61e26afddc9efee68a59fc7b07a68d45dea7a65f49c401cc48a5df28e0a3ae6ca224e455be33aaf02a0bad3d6dbbfd9542e1be5592efdc54cf2f96189c804b442e2a9d1a2e1"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffeff}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x40}}, 0x20040000) 1.998443203s ago: executing program 4 (id=721): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x6}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x1ee, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xe, @mcast1, 0x9}, r3}}, 0x30) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xe) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.997877267s ago: executing program 1 (id=722): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={0x0, 0x0, r3}) 1.790712005s ago: executing program 1 (id=723): socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, 0x0, 0x0, 0x4}, 0x90) unshare(0x22020400) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.063062604s ago: executing program 4 (id=724): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'ipvlan1\x00', &(0x7f0000000f40)=@ethtool_sfeatures={0x3b, 0x1, [{0xaaa5, 0x6}]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x7, @loopback, 0x101}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x14}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}, @snprintf={{0x7, 0x0, 0xb, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa4}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r1, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x5410, &(0x7f0000000100)) 860.745921ms ago: executing program 4 (id=725): syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x224f743e, 0x6, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0xc, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x182000) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_BULK(r6, 0x80045515, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r8, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r5, 0x0, 0x0, 0x10001, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800290002003125fdd20067907800000000e000000121009000e0000002ac1414aa"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 782.874063ms ago: executing program 1 (id=726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81803}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}}, 0x20}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 0s ago: executing program 2 (id=727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3080000000000007b8af8ff00000000b5080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): ed -16 [ 198.334315][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.355781][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.359467][ T5150] hid-generic 0003:0158:0100.0020: unknown main item tag 0x1 [ 198.370605][ T5150] hid-generic 0003:0158:0100.0020: unexpected long global item [ 198.374095][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.379119][ T5150] hid-generic 0003:0158:0100.0020: probe with driver hid-generic failed with error -22 [ 198.492370][ T4491] Bluetooth: hci2: command tx timeout [ 198.500754][ T5147] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.641227][ T5146] usb 4-1: USB disconnect, device number 20 [ 198.692528][ T5147] usb 3-1: Using ep0 maxpacket: 16 [ 198.716899][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 198.731323][ T5147] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 198.742756][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.757017][ T5147] usb 3-1: config 0 descriptor?? [ 198.928674][ T51] team0 (unregistering): Port device team_slave_1 removed [ 198.985354][ T51] team0 (unregistering): Port device team_slave_0 removed [ 199.184695][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.194620][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.213562][ T5147] hid (null): report_id 2838798905 is invalid [ 199.219722][ T5147] hid (null): unknown global tag 0xc [ 199.229221][ T5147] hid (null): unknown global tag 0xd [ 199.236580][ T5147] hid (null): unknown global tag 0xa5 [ 199.250967][ T5147] hid (null): unknown global tag 0xd [ 199.269037][ T5147] hid-generic 0003:0158:0100.0021: unknown main item tag 0x1 [ 199.278416][ T5147] hid-generic 0003:0158:0100.0021: unexpected long global item [ 199.288063][ T5147] hid-generic 0003:0158:0100.0021: probe with driver hid-generic failed with error -22 [ 199.563218][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.584908][ T7093] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 199.650884][ T5147] usb 3-1: USB disconnect, device number 20 [ 199.670708][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 199.713786][ T5148] usb 1-1: USB disconnect, device number 14 [ 199.820178][ T7027] team0: Port device team_slave_0 added [ 199.857474][ T7027] team0: Port device team_slave_1 added [ 199.880443][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 199.924040][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.979471][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.059360][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.079368][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 200.133852][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.160887][ T45] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 200.169364][ T45] usb 4-1: Product: syz [ 200.192029][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.293832][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.350337][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.489336][ T4491] Bluetooth: hci4: command tx timeout [ 200.560329][ T4491] Bluetooth: hci2: command tx timeout [ 200.566892][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.653208][ T45] usb 4-1: Manufacturer: syz [ 200.664110][ T45] hub 4-1:4.0: USB hub found [ 200.904784][ T45] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 200.913835][ T7027] hsr_slave_0: entered promiscuous mode [ 200.925369][ T7027] hsr_slave_1: entered promiscuous mode [ 201.027529][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 201.188752][ T7120] openvswitch: netlink: Message has 32 unknown bytes. [ 201.291168][ T25] usb 4-1: USB disconnect, device number 21 [ 201.544032][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.550406][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.625018][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 201.748690][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.770311][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 201.791979][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.846940][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 201.872130][ T8] usb 3-1: can't read configurations, error -71 [ 201.928024][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.118440][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.284237][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.300092][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.307699][ T7098] bridge_slave_0: entered allmulticast mode [ 202.317872][ T7098] bridge_slave_0: entered promiscuous mode [ 202.350654][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.357872][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.379563][ T7098] bridge_slave_1: entered allmulticast mode [ 202.397604][ T7098] bridge_slave_1: entered promiscuous mode [ 202.568751][ T4491] Bluetooth: hci4: command tx timeout [ 202.601564][ T29] audit: type=1326 audit(1720892805.464:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.511" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 202.640496][ T4491] Bluetooth: hci2: command tx timeout [ 202.713264][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.747844][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.034538][ T7098] team0: Port device team_slave_0 added [ 203.059864][ T7098] team0: Port device team_slave_1 added [ 203.079185][ T51] bridge_slave_1: left allmulticast mode [ 203.099316][ T51] bridge_slave_1: left promiscuous mode [ 203.125090][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.215791][ T51] bridge_slave_0: left allmulticast mode [ 203.237339][ T51] bridge_slave_0: left promiscuous mode [ 203.253817][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.304267][ T29] audit: type=1326 audit(1720892806.174:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.512" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73a1579 code=0x0 [ 203.941682][ T7107] syz.0.507 (7107): drop_caches: 1 [ 204.186453][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.201978][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.215017][ T51] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 204.228297][ T51] bond0 (unregistering): Released all slaves [ 204.297944][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.321583][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.350959][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.370306][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 204.413197][ T51] tipc: Disabling bearer [ 204.419545][ T51] tipc: Disabling bearer [ 204.427423][ T51] tipc: Left network mode [ 204.430558][ T5147] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 204.433428][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.448905][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.479291][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.570255][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 204.578286][ T25] usb 1-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 204.591040][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.618746][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 204.628250][ T5147] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 204.639296][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.640578][ T4491] Bluetooth: hci4: command tx timeout [ 204.659726][ T5147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.665263][ T25] usb 1-1: config 0 descriptor?? [ 204.687084][ T5147] usb 3-1: Product: syz [ 204.691833][ T5147] usb 3-1: Manufacturer: syz [ 204.696497][ T5147] usb 3-1: SerialNumber: syz [ 204.704802][ T5147] usb 3-1: config 0 descriptor?? [ 204.705151][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 204.713031][ T5147] ch341 3-1:0.0: ch341-uart converter detected [ 204.792508][ T7098] hsr_slave_0: entered promiscuous mode [ 204.812176][ T7098] hsr_slave_1: entered promiscuous mode [ 204.829451][ T7098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.837461][ T7098] Cannot create hsr debugfs directory [ 205.110400][ T7027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.219267][ T7027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.268546][ T7027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.295879][ T7027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.311850][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.349180][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.367167][ T51] hsr_slave_0: left promiscuous mode [ 205.397665][ T51] hsr_slave_1: left promiscuous mode [ 205.405542][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.419800][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.438985][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.447290][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.528803][ T51] veth1_macvtap: left promiscuous mode [ 205.540869][ T51] veth0_macvtap: left promiscuous mode [ 205.553440][ T51] veth1_vlan: left promiscuous mode [ 205.565671][ T51] veth0_vlan: left promiscuous mode [ 205.596797][ T5147] usb 3-1: failed to send control message: -71 [ 205.610317][ T5147] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 205.643009][ T5147] usb 3-1: USB disconnect, device number 23 [ 205.656857][ T5147] ch341 3-1:0.0: device disconnected [ 206.634208][ T51] team0 (unregistering): Port device team_slave_1 removed [ 206.680330][ T51] team0 (unregistering): Port device team_slave_0 removed [ 206.721881][ T4491] Bluetooth: hci4: command tx timeout [ 206.870322][ T5147] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 207.060466][ T5147] usb 3-1: Using ep0 maxpacket: 16 [ 207.082776][ T5147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 207.104829][ T5147] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 207.119781][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.131097][ T5147] usb 3-1: config 0 descriptor?? [ 207.142340][ T45] usb 1-1: USB disconnect, device number 15 [ 207.783744][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.903402][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.040101][ T5147] hid-generic 0003:0158:0100.0022: unknown main item tag 0x1 [ 208.181343][ T5147] hid-generic 0003:0158:0100.0022: unexpected long global item [ 208.227099][ T5147] hid-generic 0003:0158:0100.0022: probe with driver hid-generic failed with error -22 [ 208.307154][ T7214] syz.3.523 (7214): drop_caches: 1 [ 208.361339][ T5147] usb 3-1: USB disconnect, device number 24 [ 208.556356][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.569721][ T29] audit: type=1326 audit(1720892811.434:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.3.525" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73a1579 code=0x0 [ 208.654832][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.688598][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.696130][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.761403][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.768620][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.024139][ T7027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.173433][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'. [ 209.217240][ T29] audit: type=1326 audit(1720892812.084:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.257744][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.280905][ T29] audit: type=1326 audit(1720892812.084:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.370527][ T29] audit: type=1326 audit(1720892812.084:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.406291][ T7098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.421931][ T29] audit: type=1326 audit(1720892812.084:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.447612][ T29] audit: type=1326 audit(1720892812.114:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.461185][ T7239] openvswitch: netlink: Message has 32 unknown bytes. [ 209.484049][ T7098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.504575][ T29] audit: type=1326 audit(1720892812.114:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.545966][ T7098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.598368][ T7098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.598653][ T29] audit: type=1326 audit(1720892812.114:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.633922][ T7027] veth0_vlan: entered promiscuous mode [ 209.656440][ T29] audit: type=1326 audit(1720892812.114:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.688385][ T7027] veth1_vlan: entered promiscuous mode [ 209.730971][ T29] audit: type=1326 audit(1720892812.114:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf749e579 code=0x7ffc0000 [ 209.830971][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 209.852298][ T5146] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 209.864936][ T7027] veth0_macvtap: entered promiscuous mode [ 209.891647][ T7027] veth1_macvtap: entered promiscuous mode [ 209.948115][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.983432][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.997946][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.014086][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.027500][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.038397][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.049371][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.059640][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 210.064897][ T5146] usb 4-1: Using ep0 maxpacket: 16 [ 210.086780][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.097910][ T5146] usb 4-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 210.115254][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 210.123680][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.135965][ T5146] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.149087][ T25] usb 1-1: can't read configurations, error -71 [ 210.156029][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.167098][ T5146] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 210.178646][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.187347][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.238995][ T5146] usb 4-1: config 0 descriptor?? [ 210.253152][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.264193][ T5146] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 210.275541][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.304290][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.317274][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.336693][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.346719][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.359995][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.377653][ T7027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.389892][ T7027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.406653][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.453370][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.460626][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.498555][ T7027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.514595][ T7027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.526315][ T7027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.542391][ T7027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.575300][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.582594][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.757153][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.793197][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.867685][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.891687][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.941556][ T2827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.970488][ T2827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.999939][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.192862][ T7098] veth0_vlan: entered promiscuous mode [ 211.239721][ T7098] veth1_vlan: entered promiscuous mode [ 211.369902][ T7098] veth0_macvtap: entered promiscuous mode [ 211.404630][ T7098] veth1_macvtap: entered promiscuous mode [ 211.464139][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.492499][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.512904][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.544853][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.559097][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.573417][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.586107][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.597181][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.608454][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.624782][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.647399][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.669257][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.680369][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.709227][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.726274][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.739507][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.778039][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.797111][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.809666][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.823122][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.834327][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.847645][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.877352][ T7098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.889288][ T7098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.899782][ T7098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.908703][ T7098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.056926][ T2827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.077846][ T2827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.129444][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.138967][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.446293][ T7310] netlink: 128 bytes leftover after parsing attributes in process `syz.1.535'. [ 212.524295][ T6785] usb 4-1: USB disconnect, device number 22 [ 212.682092][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 212.705221][ T7320] geneve2: entered promiscuous mode [ 212.710935][ T7320] geneve2: entered allmulticast mode [ 212.844761][ T5163] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 213.050262][ T5163] usb 1-1: Using ep0 maxpacket: 16 [ 213.065966][ T5163] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.090343][ T5163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.126563][ T5163] usb 1-1: Product: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 213.176948][ T5163] usb 1-1: Manufacturer: 䎼컨枈䰊晆睧ﵼ⊬⏈뾭ࡄ诸珽뜒잽袪Ɤɍ馹♒䪚겁㯹ᮭ籠ꌇ錵遞ᶩ⯚੤㊽釾⥺ࢊ楝﷾硨쯧꣪ᢦ㮛⏄✔ꆎ㼏ׁᘡ晋༰㥥␃ꯓ숒㆙㳒》队渍ন㿳뗘Ӕ臭릍硔䗆鏈ᰣ튍둞ꓝ撯퓫鰚꘱錈竍쉤䨚⎙튃伩ㄴ⢹﫱嚊궰㜖쬓䐓줓ͱ磵萩㋼謁룒辂裢烐繺ɹ佇엤⺠ [ 213.218182][ T5163] usb 1-1: SerialNumber: 㰊 [ 213.257824][ T7337] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 213.441598][ T25] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 213.786089][ T5163] cdc_ncm 1-1:1.0: bind() failure [ 213.794610][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 213.855190][ T5163] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 213.930287][ T5163] cdc_ncm 1-1:1.1: bind() failure [ 214.004741][ T5163] usb 1-1: USB disconnect, device number 18 [ 214.252242][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.273783][ T25] usb 2-1: config 0 descriptor?? [ 214.282762][ T25] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 214.405322][ T7360] syz.2.544 (7360): drop_caches: 1 [ 214.474389][ T2468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.518794][ T25] gspca_sn9c2028: read1 error -32 [ 214.656664][ T2468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.784177][ T2468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.211053][ T2468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.352169][ T5163] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 215.610261][ T5163] usb 3-1: Using ep0 maxpacket: 16 [ 215.692284][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 215.807739][ T5163] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 215.868579][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.879975][ T5163] usb 3-1: config 0 descriptor?? [ 216.130945][ T2468] bridge_slave_1: left allmulticast mode [ 216.154007][ T2468] bridge_slave_1: left promiscuous mode [ 216.180769][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.221239][ T2468] bridge_slave_0: left allmulticast mode [ 216.227013][ T2468] bridge_slave_0: left promiscuous mode [ 216.243453][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.307630][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.318942][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.329416][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.339877][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.350711][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.358371][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.392702][ T7391] syz.4.552 (7391): drop_caches: 1 [ 216.425459][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.445704][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.481088][ T5163] hid-generic 0003:0158:0100.0023: unknown main item tag 0x1 [ 216.483584][ T45] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 216.520231][ T5163] hid-generic 0003:0158:0100.0023: unexpected long global item [ 216.560904][ T5163] hid-generic 0003:0158:0100.0023: probe with driver hid-generic failed with error -22 [ 216.690500][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 216.707704][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 216.740071][ T45] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 216.765692][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.820715][ T45] usb 4-1: config 0 descriptor?? [ 216.837062][ T5163] usb 3-1: USB disconnect, device number 25 [ 217.144586][ T25] usb 2-1: USB disconnect, device number 36 [ 217.258920][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.278333][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.304041][ T45] hid (null): nested delimiters [ 217.316485][ T45] hid (null): unknown global tag 0x83 [ 217.325656][ T45] hid (null): unknown global tag 0xc [ 217.336307][ T45] hid (null): global environment stack underflow [ 217.348895][ T45] hid-generic 0003:0158:0100.0024: unknown main item tag 0x1 [ 217.365426][ T45] hid-generic 0003:0158:0100.0024: nested delimiters [ 217.375498][ T45] hid-generic 0003:0158:0100.0024: item 0 2 2 10 parsing failed [ 217.389585][ T45] hid-generic 0003:0158:0100.0024: probe with driver hid-generic failed with error -22 [ 217.458876][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.485230][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.506608][ T2468] bond0 (unregistering): Released all slaves [ 217.532388][ T25] usb 4-1: USB disconnect, device number 23 [ 217.679263][ T7423] netlink: 128 bytes leftover after parsing attributes in process `syz.2.559'. [ 217.799148][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 218.204080][ T2468] hsr_slave_0: left promiscuous mode [ 218.242145][ T2468] hsr_slave_1: left promiscuous mode [ 218.248924][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.257262][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.286996][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.326929][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.404048][ T4491] Bluetooth: hci5: command tx timeout [ 218.495925][ T2468] veth1_macvtap: left promiscuous mode [ 218.540759][ T2468] veth0_macvtap: left promiscuous mode [ 218.720690][ T2468] veth1_vlan: left promiscuous mode [ 218.769481][ T2468] veth0_vlan: left promiscuous mode [ 218.993769][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.004786][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.013708][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.022294][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.030759][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.042973][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.248183][ T7447] syz.2.563 (7447): drop_caches: 1 [ 220.176261][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.364415][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 220.382570][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 220.392122][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.412763][ T8] usb 3-1: config 0 descriptor?? [ 220.423749][ T8] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 220.446846][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 220.480328][ T5096] Bluetooth: hci5: command tx timeout [ 220.635993][ T8] gspca_sn9c2028: read1 error -32 [ 221.033686][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 221.120520][ T5096] Bluetooth: hci4: command tx timeout [ 221.312698][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 221.329273][ T7482] geneve2: entered promiscuous mode [ 221.335560][ T7482] geneve2: entered allmulticast mode [ 221.390868][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.401467][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.408759][ T7401] bridge_slave_0: entered allmulticast mode [ 221.417775][ T7401] bridge_slave_0: entered promiscuous mode [ 221.463585][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.480416][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.487746][ T7401] bridge_slave_1: entered allmulticast mode [ 221.509809][ T7401] bridge_slave_1: entered promiscuous mode [ 221.897463][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.977103][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.284032][ T7401] team0: Port device team_slave_0 added [ 222.320744][ T7401] team0: Port device team_slave_1 added [ 222.368988][ T7493] syz.3.573 (7493): drop_caches: 1 [ 222.466591][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.485049][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.528630][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.560307][ T5096] Bluetooth: hci5: command tx timeout [ 222.602266][ T7506] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.712729][ T2468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.765434][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.784658][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.833724][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.850760][ T8] usb 3-1: USB disconnect, device number 26 [ 222.978290][ T2468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.140603][ T2468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.166349][ T7456] chnl_net:caif_netlink_parms(): no params data found [ 223.200542][ T5096] Bluetooth: hci4: command tx timeout [ 223.254205][ T7401] hsr_slave_0: entered promiscuous mode [ 223.265040][ T7401] hsr_slave_1: entered promiscuous mode [ 223.273205][ T7401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.284767][ T7401] Cannot create hsr debugfs directory [ 223.320431][ T2468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.501020][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 223.586171][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.604786][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.618114][ T7456] bridge_slave_0: entered allmulticast mode [ 223.628733][ T7456] bridge_slave_0: entered promiscuous mode [ 223.643786][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.660024][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.668116][ T7456] bridge_slave_1: entered allmulticast mode [ 223.685329][ T7456] bridge_slave_1: entered promiscuous mode [ 223.700354][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 223.716229][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 223.747092][ T8] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 223.776273][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.801253][ T8] usb 4-1: config 0 descriptor?? [ 223.845465][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.867802][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.879991][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.890278][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.903277][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.912621][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.920179][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.975004][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.208796][ T7456] team0: Port device team_slave_0 added [ 224.255584][ T2468] bridge_slave_1: left allmulticast mode [ 224.272733][ T2468] bridge_slave_1: left promiscuous mode [ 224.278647][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.322641][ T2468] bridge_slave_0: left allmulticast mode [ 224.328396][ T2468] bridge_slave_0: left promiscuous mode [ 224.338933][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.428664][ T7520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.467436][ T7520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.525631][ T8] hid-generic 0003:0158:0100.0025: unknown main item tag 0x1 [ 224.643349][ T4491] Bluetooth: hci5: command tx timeout [ 225.200550][ T8] hid-generic 0003:0158:0100.0025: unexpected long global item [ 225.209092][ T8] hid-generic 0003:0158:0100.0025: probe with driver hid-generic failed with error -22 [ 225.243829][ T8] usb 4-1: USB disconnect, device number 24 [ 225.258856][ T7543] syz.4.581 (7543): drop_caches: 1 [ 225.285509][ T4491] Bluetooth: hci4: command tx timeout [ 225.658611][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.673751][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.686720][ T2468] bond0 (unregistering): Released all slaves [ 225.744814][ T7456] team0: Port device team_slave_1 added [ 226.002674][ T4491] Bluetooth: hci3: command tx timeout [ 226.025167][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.046549][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.091261][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.201721][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.221924][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.248025][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.261584][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.547792][ T2468] hsr_slave_0: left promiscuous mode [ 226.555340][ T2468] hsr_slave_1: left promiscuous mode [ 226.561953][ T6785] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 226.572827][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.581292][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.589268][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.596969][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.622289][ T2468] veth1_macvtap: left promiscuous mode [ 226.627842][ T2468] veth0_macvtap: left promiscuous mode [ 226.633733][ T2468] veth1_vlan: left promiscuous mode [ 226.639083][ T2468] veth0_vlan: left promiscuous mode [ 226.750413][ T6785] usb 4-1: Using ep0 maxpacket: 16 [ 226.762898][ T6785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 226.783572][ T6785] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 226.793154][ T6785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.806468][ T6785] usb 4-1: config 0 descriptor?? [ 227.269860][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 227.318291][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 227.371429][ T4491] Bluetooth: hci4: command tx timeout [ 227.385331][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.394981][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.411057][ T6785] hid-generic 0003:0158:0100.0026: unknown main item tag 0x1 [ 227.418511][ T6785] hid-generic 0003:0158:0100.0026: unexpected long global item [ 227.427045][ T6785] hid-generic 0003:0158:0100.0026: probe with driver hid-generic failed with error -22 [ 227.687097][ T5150] usb 4-1: USB disconnect, device number 25 [ 227.916305][ T7456] hsr_slave_0: entered promiscuous mode [ 227.931576][ T7456] hsr_slave_1: entered promiscuous mode [ 227.938039][ T7456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.947691][ T7456] Cannot create hsr debugfs directory [ 228.082221][ T4491] Bluetooth: hci3: command tx timeout [ 228.306166][ T7401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.328431][ T7401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.341244][ T7528] chnl_net:caif_netlink_parms(): no params data found [ 228.374918][ T7401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.457067][ T7401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.612439][ T4491] Bluetooth: hci0: unexpected cc 0x2039 length: 4 > 1 [ 228.708215][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.728229][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.746554][ T7528] bridge_slave_0: entered allmulticast mode [ 228.768794][ T7528] bridge_slave_0: entered promiscuous mode [ 228.828344][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.841943][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.849457][ T7528] bridge_slave_1: entered allmulticast mode [ 228.871591][ T7528] bridge_slave_1: entered promiscuous mode [ 228.968576][ T2468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.129450][ T2468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.153419][ T7528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.186315][ T7528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.269179][ T2468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.388192][ T7528] team0: Port device team_slave_0 added [ 229.435145][ T2468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.497653][ T7528] team0: Port device team_slave_1 added [ 229.606748][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.630371][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.667345][ T7528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.731273][ T7528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.738276][ T7528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.772606][ T7528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.925293][ T7456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.066555][ T7456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.110629][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 230.122206][ T7528] hsr_slave_0: entered promiscuous mode [ 230.138256][ T7528] hsr_slave_1: entered promiscuous mode [ 230.154322][ T7528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.163959][ T4491] Bluetooth: hci3: command tx timeout [ 230.186553][ T7528] Cannot create hsr debugfs directory [ 230.216936][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.272303][ T2468] bridge_slave_1: left allmulticast mode [ 230.278023][ T2468] bridge_slave_1: left promiscuous mode [ 230.293152][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.312727][ T2468] bridge_slave_0: left allmulticast mode [ 230.318591][ T2468] bridge_slave_0: left promiscuous mode [ 230.325928][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 230.329914][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.340938][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 230.353971][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 230.363542][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.378180][ T25] usb 4-1: config 0 descriptor?? [ 230.902276][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.917011][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.931531][ T2468] bond0 (unregistering): Released all slaves [ 230.946615][ T7456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.987949][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.997027][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.052915][ T7456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.062801][ T25] hid-generic 0003:0158:0100.0027: unknown main item tag 0x1 [ 231.085884][ T25] hid-generic 0003:0158:0100.0027: unexpected long global item [ 231.118102][ T25] hid-generic 0003:0158:0100.0027: probe with driver hid-generic failed with error -22 [ 231.219684][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.383437][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.390697][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.422330][ T8] usb 4-1: USB disconnect, device number 26 [ 231.494798][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.502104][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.558326][ T2468] hsr_slave_0: left promiscuous mode [ 231.573480][ T2468] hsr_slave_1: left promiscuous mode [ 231.599833][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.628235][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.638912][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.656081][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.693701][ T2468] veth1_macvtap: left promiscuous mode [ 231.699487][ T2468] veth0_macvtap: left promiscuous mode [ 231.706318][ T2468] veth1_vlan: left promiscuous mode [ 231.717933][ T2468] veth0_vlan: left promiscuous mode [ 232.240519][ T4491] Bluetooth: hci3: command tx timeout [ 232.359852][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 232.405084][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 232.563381][ T4491] Bluetooth: hci0: unexpected cc 0x2039 length: 4 > 1 [ 233.272715][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.344540][ T7667] netlink: 128 bytes leftover after parsing attributes in process `syz.4.600'. [ 233.345154][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.529871][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.537100][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.595191][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.600634][ T5100] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 233.602395][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.677547][ T7677] netlink: 'syz.4.602': attribute type 12 has an invalid length. [ 233.701867][ T7677] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.602'. [ 233.745465][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.778651][ T7456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.823222][ T5100] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 233.850891][ T5100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.890986][ T5100] usb 4-1: config 0 descriptor?? [ 233.902218][ T5100] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 233.999424][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.062652][ T7528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.125269][ T7528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.131209][ T5100] gspca_sn9c2028: read1 error -32 [ 234.144662][ T7528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.175097][ T7528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.203666][ T7401] veth0_vlan: entered promiscuous mode [ 234.237565][ T7401] veth1_vlan: entered promiscuous mode [ 234.304552][ T7401] veth0_macvtap: entered promiscuous mode [ 234.345082][ T7401] veth1_macvtap: entered promiscuous mode [ 234.365605][ T7456] veth0_vlan: entered promiscuous mode [ 234.426899][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.441441][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.452798][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.463583][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.474231][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.488119][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.506493][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.518475][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.529599][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.542416][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.552950][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.565469][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.578517][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.591431][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.613900][ T7456] veth1_vlan: entered promiscuous mode [ 234.644418][ T7401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.654441][ T7401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.663712][ T7401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.677727][ T7401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.894925][ T7456] veth0_macvtap: entered promiscuous mode [ 234.920770][ T2827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.928224][ T7528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.956162][ T2827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.968839][ T7456] veth1_macvtap: entered promiscuous mode [ 235.017151][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.025763][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.039833][ T7528] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.073709][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.085483][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.096710][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.107301][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.119510][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.131906][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.141945][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.152450][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.165097][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.178547][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.189146][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.199357][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.212251][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.241392][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.258509][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.268767][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.284158][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.296202][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.309658][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.317032][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.342129][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.349336][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.361913][ T7456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.372427][ T7456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.381732][ T7456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.393207][ T7456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.530349][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 235.647173][ T2827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.679323][ T2827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.742712][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 235.778279][ T25] usb 1-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 235.793188][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.807033][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.833223][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.848491][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 235.853598][ T7528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.862756][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.888973][ T25] usb 1-1: config 0 descriptor?? [ 235.915436][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 236.109467][ T7528] veth0_vlan: entered promiscuous mode [ 236.171085][ T7528] veth1_vlan: entered promiscuous mode [ 236.196476][ T5147] usb 4-1: USB disconnect, device number 27 [ 236.344127][ T7706] netlink: 52 bytes leftover after parsing attributes in process `syz.1.603'. [ 236.406646][ T7528] veth0_macvtap: entered promiscuous mode [ 236.437985][ T7528] veth1_macvtap: entered promiscuous mode [ 236.534533][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.554572][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.580315][ T6568] syz-executor (6568) used greatest stack depth: 18528 bytes left [ 236.588567][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.625289][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.660425][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.690214][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.721287][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.739389][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.760289][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.775996][ T4491] Bluetooth: hci4: unexpected cc 0x2039 length: 4 > 1 [ 236.778702][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.801890][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.812851][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.826348][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.869174][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.900254][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.916729][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.928764][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.939037][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.959473][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.970749][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.990593][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.010563][ T7528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.026955][ T7528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.043129][ T7528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.189749][ T2468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.279792][ T7528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.313403][ T7528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.351042][ T7528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.388398][ T7528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.480791][ T2468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.636715][ T2468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.658227][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.669825][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.686801][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.698018][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.712335][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.719944][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.809924][ T2468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.831689][ T959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.839564][ T959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.943366][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.958719][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.031184][ T5148] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 238.184218][ T2468] bridge_slave_1: left allmulticast mode [ 238.200869][ T2468] bridge_slave_1: left promiscuous mode [ 238.222316][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.275896][ T2468] bridge_slave_0: left allmulticast mode [ 238.311118][ T2468] bridge_slave_0: left promiscuous mode [ 238.319645][ T9] usb 1-1: USB disconnect, device number 19 [ 238.352670][ T5148] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 238.371897][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.594786][ T7749] netlink: 52 bytes leftover after parsing attributes in process `syz.0.614'. [ 238.914660][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.930743][ T5148] usb 2-1: config 0 descriptor?? [ 238.939617][ T5148] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 239.103786][ T7746] syz.2.580 (7746): drop_caches: 1 [ 239.144471][ T5148] gspca_sn9c2028: read1 error -32 [ 239.382547][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.419053][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.438905][ T2468] bond0 (unregistering): Released all slaves [ 239.760750][ T4491] Bluetooth: hci0: command tx timeout [ 240.050221][ T5148] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 240.061539][ T7740] chnl_net:caif_netlink_parms(): no params data found [ 240.078727][ T7771] netlink: 'syz.0.618': attribute type 12 has an invalid length. [ 240.096987][ T7771] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.618'. [ 240.152002][ T2468] hsr_slave_0: left promiscuous mode [ 240.167415][ T2468] hsr_slave_1: left promiscuous mode [ 240.184666][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.196176][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.208658][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.220415][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.251994][ T2468] veth1_macvtap: left promiscuous mode [ 240.257681][ T2468] veth0_macvtap: left promiscuous mode [ 240.263960][ T5148] usb 3-1: Using ep0 maxpacket: 16 [ 240.271764][ T2468] veth1_vlan: left promiscuous mode [ 240.277778][ T2468] veth0_vlan: left promiscuous mode [ 240.290773][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 240.305916][ T5148] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 240.318718][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.353147][ T5148] usb 3-1: config 0 descriptor?? [ 240.441896][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 240.641119][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 240.662357][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 240.691796][ T5163] usb 2-1: USB disconnect, device number 37 [ 240.694034][ T45] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 240.724854][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.770403][ T45] usb 1-1: config 0 descriptor?? [ 240.823386][ T4491] Bluetooth: hci2: unexpected cc 0x2039 length: 4 > 1 [ 240.937946][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.967118][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.992677][ T5148] hid-generic 0003:0158:0100.0028: unknown main item tag 0x1 [ 241.006898][ T5148] hid-generic 0003:0158:0100.0028: unexpected long global item [ 241.016051][ T5148] hid-generic 0003:0158:0100.0028: probe with driver hid-generic failed with error -22 [ 241.223157][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.234413][ T5147] usb 3-1: USB disconnect, device number 27 [ 241.248500][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.289323][ T45] hid (null): nested delimiters [ 241.303731][ T45] hid (null): unknown global tag 0x83 [ 241.317979][ T45] hid (null): unknown global tag 0xc [ 241.324933][ T45] hid (null): global environment stack underflow [ 241.337412][ T45] hid-generic 0003:0158:0100.0029: unknown main item tag 0x1 [ 241.348044][ T45] hid-generic 0003:0158:0100.0029: nested delimiters [ 241.355509][ T45] hid-generic 0003:0158:0100.0029: item 0 2 2 10 parsing failed [ 241.369938][ T45] hid-generic 0003:0158:0100.0029: probe with driver hid-generic failed with error -22 [ 241.429881][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 241.486914][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 241.841608][ T4491] Bluetooth: hci0: command tx timeout [ 242.419188][ T7797] x_tables: duplicate underflow at hook 2 [ 242.425783][ T5147] usb 1-1: USB disconnect, device number 20 [ 242.580388][ T7740] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.587640][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.608429][ T7740] bridge_slave_0: entered allmulticast mode [ 242.648705][ T7740] bridge_slave_0: entered promiscuous mode [ 242.670307][ T7740] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.686987][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.708666][ T7740] bridge_slave_1: entered allmulticast mode [ 242.716699][ T7740] bridge_slave_1: entered promiscuous mode [ 242.783221][ T7740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.792608][ T5163] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 242.820480][ T7805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.626'. [ 242.861664][ T7740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.970226][ T5163] usb 3-1: device descriptor read/64, error -71 [ 242.990567][ T7740] team0: Port device team_slave_0 added [ 243.030466][ T7740] team0: Port device team_slave_1 added [ 243.186910][ T7740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.232078][ T7740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.250258][ T5163] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 243.289367][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.309353][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.321451][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.329858][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.338189][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 243.346774][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.376416][ T7740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.401370][ T7740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.419047][ T7740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.480447][ T7740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.514781][ T5163] usb 3-1: device descriptor read/64, error -71 [ 243.687730][ T5163] usb usb3-port1: attempt power cycle [ 243.922007][ T4491] Bluetooth: hci0: command tx timeout [ 244.056565][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.129731][ T7740] hsr_slave_0: entered promiscuous mode [ 244.140398][ T5163] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 244.154417][ T7740] hsr_slave_1: entered promiscuous mode [ 244.165402][ T7740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.166706][ T7818] syz.0.628 (7818): drop_caches: 1 [ 244.181580][ T7740] Cannot create hsr debugfs directory [ 244.188879][ T5163] usb 3-1: device descriptor read/8, error -71 [ 244.253324][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.471219][ T5163] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 244.473337][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.511444][ T5163] usb 3-1: device descriptor read/8, error -71 [ 244.591082][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.644084][ T5163] usb usb3-port1: unable to enumerate USB device [ 244.720300][ T5147] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 244.900856][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 244.929538][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 244.990267][ T5147] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 245.021281][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.085303][ T5147] usb 1-1: config 0 descriptor?? [ 245.448319][ T4491] Bluetooth: hci4: command tx timeout [ 245.508841][ T51] bridge_slave_1: left allmulticast mode [ 245.523197][ T51] bridge_slave_1: left promiscuous mode [ 245.529037][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.574638][ T51] bridge_slave_0: left allmulticast mode [ 245.590337][ T51] bridge_slave_0: left promiscuous mode [ 245.606352][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.801503][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 245.801523][ T29] audit: type=1326 audit(1720892848.674:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.2.634" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7486579 code=0x0 [ 245.912604][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.934829][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.996086][ T5147] hid-generic 0003:0158:0100.002A: unknown main item tag 0x1 [ 246.010302][ T4491] Bluetooth: hci0: command tx timeout [ 246.015477][ T5147] hid-generic 0003:0158:0100.002A: unexpected long global item [ 246.065942][ T5147] hid-generic 0003:0158:0100.002A: probe with driver hid-generic failed with error -22 [ 246.186371][ T5148] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 246.284014][ T45] usb 1-1: USB disconnect, device number 21 [ 246.367925][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.383113][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.394186][ T51] bond0 (unregistering): Released all slaves [ 246.405886][ T5148] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.415952][ T5148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.431839][ T5148] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.456128][ T5148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.476506][ T5148] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.496172][ T7819] chnl_net:caif_netlink_parms(): no params data found [ 246.498433][ T5148] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.511932][ T5148] usb 3-1: Product: syz [ 246.516243][ T5148] usb 3-1: Manufacturer: syz [ 246.549889][ T5148] cdc_wdm 3-1:1.0: skipping garbage [ 246.556411][ T5148] cdc_wdm 3-1:1.0: skipping garbage [ 246.570194][ T5148] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 246.597986][ T5148] cdc_wdm 3-1:1.0: Unknown control protocol [ 246.811171][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.818431][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.826553][ T7819] bridge_slave_0: entered allmulticast mode [ 246.834519][ T7819] bridge_slave_0: entered promiscuous mode [ 246.868393][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.880521][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.901642][ T7819] bridge_slave_1: entered allmulticast mode [ 246.918870][ T7819] bridge_slave_1: entered promiscuous mode [ 246.955358][ T51] hsr_slave_0: left promiscuous mode [ 246.981519][ T51] hsr_slave_1: left promiscuous mode [ 247.001721][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.017325][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.044601][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.076934][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.206792][ T51] veth1_macvtap: left promiscuous mode [ 247.224871][ T51] veth0_macvtap: left promiscuous mode [ 247.233426][ T51] veth1_vlan: left promiscuous mode [ 247.238836][ T51] veth0_vlan: left promiscuous mode [ 247.246611][ T7888] FAULT_INJECTION: forcing a failure. [ 247.246611][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.260737][ T7888] CPU: 0 PID: 7888 Comm: syz.0.635 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 247.270765][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.280832][ T7888] Call Trace: [ 247.284123][ T7888] [ 247.287075][ T7888] dump_stack_lvl+0x241/0x360 [ 247.291892][ T7888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.297155][ T7888] ? __pfx__printk+0x10/0x10 [ 247.301772][ T7888] ? __pfx_lock_release+0x10/0x10 [ 247.306931][ T7888] should_fail_ex+0x3b0/0x4e0 [ 247.312105][ T7888] _copy_from_user+0x2f/0xe0 [ 247.316738][ T7888] ucma_write+0x183/0x430 [ 247.321120][ T7888] ? common_file_perm+0x1a6/0x210 [ 247.326174][ T7888] ? __pfx_ucma_write+0x10/0x10 [ 247.331042][ T7888] ? bpf_lsm_file_permission+0x9/0x10 [ 247.336492][ T7888] ? rw_verify_area+0x1d2/0x6b0 [ 247.341366][ T7888] vfs_writev+0x5af/0xbb0 [ 247.345726][ T7888] ? __pfx_ucma_write+0x10/0x10 [ 247.350594][ T7888] ? __pfx_vfs_writev+0x10/0x10 [ 247.355469][ T7888] ? vfs_write+0x7c4/0xc90 [ 247.359902][ T7888] ? __fget_files+0x29/0x470 [ 247.364536][ T7888] do_writev+0x1b1/0x350 [ 247.368810][ T7888] ? __pfx_do_writev+0x10/0x10 [ 247.373601][ T7888] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 247.380231][ T7888] ? lockdep_hardirqs_on+0x99/0x150 [ 247.385453][ T7888] __do_fast_syscall_32+0xb4/0x120 [ 247.390598][ T7888] ? exc_page_fault+0x590/0x8c0 [ 247.395463][ T7888] do_fast_syscall_32+0x34/0x80 [ 247.400333][ T7888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.406852][ T7888] RIP: 0023:0xf73b2579 [ 247.410953][ T7888] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 247.430675][ T7888] RSP: 002b:00000000f5ccb57c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 247.439201][ T7888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 247.447189][ T7888] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.455267][ T7888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.463339][ T7888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.471319][ T7888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.479331][ T7888] [ 247.520385][ T4491] Bluetooth: hci4: command tx timeout [ 247.568728][ T5163] usb 3-1: USB disconnect, device number 32 [ 247.737323][ T7894] netlink: 'syz.0.636': attribute type 12 has an invalid length. [ 247.759703][ T7894] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.636'. [ 248.080382][ T5148] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 248.290408][ T5148] usb 1-1: Using ep0 maxpacket: 16 [ 248.298847][ T5148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 248.312394][ T5148] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 248.324447][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.354558][ T5148] usb 1-1: config 0 descriptor?? [ 248.771641][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.838905][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.894914][ T5148] hid (null): nested delimiters [ 248.934636][ T5148] hid (null): unknown global tag 0x83 [ 248.965630][ T5148] hid (null): unknown global tag 0xc [ 249.006180][ T5148] hid (null): global environment stack underflow [ 249.074087][ T5148] hid-generic 0003:0158:0100.002B: unknown main item tag 0x1 [ 249.102170][ T5148] hid-generic 0003:0158:0100.002B: nested delimiters [ 249.150365][ T5148] hid-generic 0003:0158:0100.002B: item 0 2 2 10 parsing failed [ 249.188024][ T5148] hid-generic 0003:0158:0100.002B: probe with driver hid-generic failed with error -22 [ 249.347045][ T7909] syz.4.638 (7909): drop_caches: 1 [ 249.408677][ T51] team0 (unregistering): Port device team_slave_1 removed [ 249.459997][ T51] team0 (unregistering): Port device team_slave_0 removed [ 249.546249][ T29] audit: type=1326 audit(1720892852.414:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.640" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7404579 code=0x0 [ 249.605808][ T4491] Bluetooth: hci4: command tx timeout [ 249.617974][ T7915] FAULT_INJECTION: forcing a failure. [ 249.617974][ T7915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.631561][ T7915] CPU: 1 PID: 7915 Comm: syz.4.640 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 249.641589][ T7915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 249.651857][ T7915] Call Trace: [ 249.655174][ T7915] [ 249.658133][ T7915] dump_stack_lvl+0x241/0x360 [ 249.662934][ T7915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.668188][ T7915] ? __pfx__printk+0x10/0x10 [ 249.672809][ T7915] ? __lock_acquire+0x1346/0x1fd0 [ 249.677870][ T7915] should_fail_ex+0x3b0/0x4e0 [ 249.682577][ T7915] prepare_alloc_pages+0x1da/0x5d0 [ 249.687831][ T7915] __alloc_pages_noprof+0x166/0x6c0 [ 249.693082][ T7915] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 249.698851][ T7915] __kmalloc_large_node+0x8b/0x1d0 [ 249.703995][ T7915] ? iovec_from_user+0x87/0x240 [ 249.708872][ T7915] __kmalloc_noprof+0x2aa/0x400 [ 249.713747][ T7915] ? get_pid_task+0x23/0x1f0 [ 249.718382][ T7915] iovec_from_user+0x87/0x240 [ 249.723107][ T7915] ? mark_lock+0x9a/0x350 [ 249.727458][ T7915] __import_iovec+0x132/0x820 [ 249.732266][ T7915] import_iovec+0xeb/0x120 [ 249.737219][ T7915] vfs_readv+0x1ad/0xa90 [ 249.741488][ T7915] ? __pfx_lock_acquire+0x10/0x10 [ 249.746521][ T7915] ? __pfx_vfs_readv+0x10/0x10 [ 249.751315][ T7915] ? __fget_files+0x29/0x470 [ 249.755933][ T7915] __ia32_compat_sys_preadv+0x1db/0x2e0 [ 249.761515][ T7915] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 249.767627][ T7915] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 249.774253][ T7915] ? lockdep_hardirqs_on+0x99/0x150 [ 249.779516][ T7915] __do_fast_syscall_32+0xb4/0x120 [ 249.784671][ T7915] ? exc_page_fault+0x590/0x8c0 [ 249.789568][ T7915] do_fast_syscall_32+0x34/0x80 [ 249.794454][ T7915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.800801][ T7915] RIP: 0023:0xf7404579 [ 249.804882][ T7915] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.824506][ T7915] RSP: 002b:00000000f5cfc57c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 249.832939][ T7915] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 249.840922][ T7915] RDX: 000000000000024f RSI: 0000000000000001 RDI: 0000000000000000 [ 249.848900][ T7915] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.856894][ T7915] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.864878][ T7915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.872879][ T7915] [ 250.404278][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.509673][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.551576][ T5147] usb 1-1: USB disconnect, device number 22 [ 250.638060][ T7740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.665127][ T7740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.772359][ T7819] team0: Port device team_slave_0 added [ 250.798247][ T7740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.819316][ T7819] team0: Port device team_slave_1 added [ 250.829396][ T7740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.929259][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.949157][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.978708][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.002976][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.010007][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.040479][ T45] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 251.040642][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.158942][ T7819] hsr_slave_0: entered promiscuous mode [ 251.166015][ T7819] hsr_slave_1: entered promiscuous mode [ 251.175994][ T7819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.192221][ T7819] Cannot create hsr debugfs directory [ 251.240255][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 251.258166][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 251.297552][ T45] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 251.319443][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.348867][ T45] usb 3-1: config 0 descriptor?? [ 251.612184][ T7740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.680595][ T4491] Bluetooth: hci4: command tx timeout [ 251.727823][ T7740] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.759556][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 251.978985][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.986381][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.045159][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.052445][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.131347][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.158349][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.219780][ T45] hid-generic 0003:0158:0100.002C: unknown main item tag 0x1 [ 252.248364][ T45] hid-generic 0003:0158:0100.002C: unexpected long global item [ 252.273249][ T45] hid-generic 0003:0158:0100.002C: probe with driver hid-generic failed with error -22 [ 252.456847][ T7740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.627458][ T6785] usb 3-1: USB disconnect, device number 33 [ 252.670402][ T7740] veth0_vlan: entered promiscuous mode [ 252.772467][ T7740] veth1_vlan: entered promiscuous mode [ 252.803007][ T7819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.815913][ T7819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.838643][ T7819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.863962][ T7819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.956755][ T7740] veth0_macvtap: entered promiscuous mode [ 252.975805][ T7740] veth1_macvtap: entered promiscuous mode [ 253.027475][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.057310][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.078964][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.098558][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.108952][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.119850][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.130078][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.143498][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.155713][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.204852][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.225193][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.240636][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.254779][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.267940][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.279084][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.289686][ T7740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.300768][ T7740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.315679][ T7740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.394312][ T7740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.406867][ T7740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.420056][ T7740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.437232][ T7740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.692742][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.789037][ T7819] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.831619][ T7981] netlink: 'syz.0.654': attribute type 12 has an invalid length. [ 253.839438][ T7981] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.654'. [ 253.874493][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.876250][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.889669][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.914068][ T7983] netlink: 'syz.2.653': attribute type 2 has an invalid length. [ 253.934956][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.977080][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.984359][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.170741][ T5147] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 254.196662][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.220054][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.344349][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.381514][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 254.415537][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 254.459648][ T5147] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 254.470983][ T29] audit: type=1326 audit(1720892857.324:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.2.656" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7486579 code=0x0 [ 254.538625][ T7819] veth0_vlan: entered promiscuous mode [ 254.550583][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.563346][ T7819] veth1_vlan: entered promiscuous mode [ 254.589059][ T8000] netlink: 128 bytes leftover after parsing attributes in process `syz.3.608'. [ 254.599408][ T5147] usb 1-1: config 0 descriptor?? [ 254.684696][ T7819] veth0_macvtap: entered promiscuous mode [ 254.716752][ T7819] veth1_macvtap: entered promiscuous mode [ 254.817532][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.876033][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.900210][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.918995][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.937178][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.969253][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.986580][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.997270][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.007339][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.021368][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.043896][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.075787][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.118128][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.132235][ T7981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.141416][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.163247][ T7981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.169532][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.198230][ T5147] hid (null): nested delimiters [ 255.213935][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.226868][ T5147] hid (null): unknown global tag 0x83 [ 255.247424][ T5147] hid (null): unknown global tag 0xc [ 255.257480][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.269932][ T5147] hid (null): global environment stack underflow [ 255.279150][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.305525][ T5147] hid-generic 0003:0158:0100.002D: unknown main item tag 0x1 [ 255.315669][ T5147] hid-generic 0003:0158:0100.002D: nested delimiters [ 255.328770][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.346727][ T5147] hid-generic 0003:0158:0100.002D: item 0 2 2 10 parsing failed [ 255.354715][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.374398][ T5147] hid-generic 0003:0158:0100.002D: probe with driver hid-generic failed with error -22 [ 255.400513][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.422262][ T5147] usb 1-1: USB disconnect, device number 23 [ 255.437093][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.471114][ T7819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.497955][ T7819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.541728][ T7819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.565255][ T7819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.877882][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.923852][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.069020][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.085281][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095092][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.102163][ T8030] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 256.138216][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.147743][ T8030] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 256.186020][ T8030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.289608][ T8043] netlink: 'syz.4.664': attribute type 7 has an invalid length. [ 256.320467][ T8043] netlink: 'syz.4.664': attribute type 6 has an invalid length. [ 256.488241][ T8048] netlink: 52 bytes leftover after parsing attributes in process `syz.1.625'. [ 256.504217][ T5147] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 256.700326][ T5147] usb 4-1: Using ep0 maxpacket: 16 [ 256.735581][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 256.743266][ T8057] netlink: 128 bytes leftover after parsing attributes in process `syz.1.667'. [ 256.780375][ T5147] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 256.789485][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.809946][ T5147] usb 4-1: config 0 descriptor?? [ 256.840421][ T6785] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 256.987518][ T29] audit: type=1326 audit(1720892859.854:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.1.669" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740b579 code=0x0 [ 257.061362][ T6785] usb 3-1: Using ep0 maxpacket: 32 [ 257.068957][ T6785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.095668][ T6785] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.108742][ T6785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.119231][ T6785] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 257.154815][ T6785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 257.168358][ T6785] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 257.190280][ T6785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.213975][ T6785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.227681][ T6785] usb 3-1: Product: syz [ 257.237440][ T6785] usb 3-1: Manufacturer: syz [ 257.249177][ T6785] usb 3-1: SerialNumber: syz [ 257.267494][ T6785] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 257.274520][ T6785] cdc_ncm 3-1:1.0: bind() failure [ 257.284087][ T6785] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 257.294746][ T6785] cdc_ncm 3-1:1.1: bind() failure [ 257.356194][ T8037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.369698][ T8037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.385053][ T5147] hid-generic 0003:0158:0100.002E: unknown main item tag 0x1 [ 257.393573][ T5147] hid-generic 0003:0158:0100.002E: unexpected long global item [ 257.402404][ T5147] hid-generic 0003:0158:0100.002E: probe with driver hid-generic failed with error -22 [ 257.476628][ T6785] usb 3-1: USB disconnect, device number 34 [ 257.637022][ T5147] usb 4-1: USB disconnect, device number 28 [ 258.210201][ T6785] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 258.605345][ T2468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.877670][ T6785] usb 2-1: Using ep0 maxpacket: 16 [ 258.896948][ T6785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 258.922866][ T6785] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 258.936291][ T6785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.949970][ T6785] usb 2-1: config 0 descriptor?? [ 259.056673][ T2468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.112453][ T8084] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 259.124637][ T8084] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 259.151281][ T8080] syz.0.674 (8080): drop_caches: 1 [ 259.156800][ T8084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.222643][ T2468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.435523][ T2468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.561657][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.606626][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.688774][ T6785] hid-generic 0003:0158:0100.002F: unknown main item tag 0x1 [ 259.761076][ T6785] hid-generic 0003:0158:0100.002F: unexpected long global item [ 259.798755][ T6785] hid-generic 0003:0158:0100.002F: probe with driver hid-generic failed with error -22 [ 259.803673][ T2468] bridge_slave_1: left allmulticast mode [ 259.825568][ T29] audit: type=1326 audit(1720892862.694:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.0.682" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b2579 code=0x0 [ 259.842091][ T2468] bridge_slave_1: left promiscuous mode [ 259.905533][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.943162][ T2468] bridge_slave_0: left allmulticast mode [ 259.969959][ T2468] bridge_slave_0: left promiscuous mode [ 259.979274][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.015318][ T25] usb 2-1: USB disconnect, device number 38 [ 260.096510][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.116532][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.137080][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.149270][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.161851][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.169464][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.608967][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.628776][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.656231][ T2468] bond0 (unregistering): Released all slaves [ 261.230878][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 261.340499][ T5145] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 261.450477][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 261.483024][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 261.497764][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 261.507342][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.520031][ T25] usb 1-1: config 0 descriptor?? [ 261.535666][ T2468] hsr_slave_0: left promiscuous mode [ 261.560299][ T5145] usb 4-1: Using ep0 maxpacket: 16 [ 261.581459][ T2468] hsr_slave_1: left promiscuous mode [ 261.594903][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 261.612087][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.619560][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.633299][ T5145] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 261.647017][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.647064][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.647100][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.658758][ T5145] usb 4-1: config 0 descriptor?? [ 261.764281][ T2468] veth1_macvtap: left promiscuous mode [ 261.778848][ T2468] veth0_macvtap: left promiscuous mode [ 261.786872][ T2468] veth1_vlan: left promiscuous mode [ 261.799240][ T2468] veth0_vlan: left promiscuous mode [ 262.040971][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.069591][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.119301][ T25] hid-generic 0003:0158:0100.0030: unknown main item tag 0x1 [ 262.127107][ T25] hid-generic 0003:0158:0100.0030: unexpected long global item [ 262.136552][ T25] hid-generic 0003:0158:0100.0030: probe with driver hid-generic failed with error -22 [ 262.240844][ T4491] Bluetooth: hci3: command tx timeout [ 262.358603][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.383847][ T25] usb 1-1: USB disconnect, device number 24 [ 262.387307][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.467641][ T5145] hid-generic 0003:0158:0100.0031: unknown main item tag 0x1 [ 262.490197][ T5145] hid-generic 0003:0158:0100.0031: unexpected long global item [ 262.498692][ T5145] hid-generic 0003:0158:0100.0031: probe with driver hid-generic failed with error -22 [ 262.705412][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 262.756881][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 262.807572][ T5147] usb 4-1: USB disconnect, device number 29 [ 263.399308][ T8131] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 263.408299][ T8131] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 263.442625][ T8131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.570552][ T8106] chnl_net:caif_netlink_parms(): no params data found [ 263.759997][ T29] audit: type=1326 audit(1720892866.624:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.0.695" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b2579 code=0x0 [ 263.979700][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.005684][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.019727][ T8106] bridge_slave_0: entered allmulticast mode [ 264.037852][ T8106] bridge_slave_0: entered promiscuous mode [ 264.048243][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.056051][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.064046][ T8106] bridge_slave_1: entered allmulticast mode [ 264.079627][ T8106] bridge_slave_1: entered promiscuous mode [ 264.156529][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.165961][ T5145] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 264.188873][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.262901][ T8106] team0: Port device team_slave_0 added [ 264.273457][ T8106] team0: Port device team_slave_1 added [ 264.320390][ T4491] Bluetooth: hci3: command tx timeout [ 264.332387][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.341671][ T5145] usb 4-1: device descriptor read/64, error -71 [ 264.349486][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.375501][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.384052][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.397941][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.418772][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.444789][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.460939][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.556664][ T8106] hsr_slave_0: entered promiscuous mode [ 264.593933][ T8106] hsr_slave_1: entered promiscuous mode [ 264.611910][ T8106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.619537][ T8106] Cannot create hsr debugfs directory [ 264.632115][ T5145] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 264.811202][ T5145] usb 4-1: device descriptor read/64, error -71 [ 264.946266][ T5145] usb usb4-port1: attempt power cycle [ 265.171083][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 265.361523][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 265.378567][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 265.390001][ T5145] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 265.410724][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 265.427136][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.431493][ T5145] usb 4-1: device descriptor read/8, error -71 [ 265.458045][ T25] usb 1-1: config 0 descriptor?? [ 265.752568][ T5145] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 265.831952][ T5145] usb 4-1: device descriptor read/8, error -71 [ 265.909112][ T8106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.934326][ T8106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.956210][ T8106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.981604][ T5145] usb usb4-port1: unable to enumerate USB device [ 265.994916][ T8106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.026336][ T8211] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 266.035238][ T8211] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 266.051505][ T8211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.139393][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.170361][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.227960][ T25] hid-generic 0003:0158:0100.0032: unknown main item tag 0x1 [ 266.258981][ T25] hid-generic 0003:0158:0100.0032: unexpected long global item [ 266.278177][ T25] hid-generic 0003:0158:0100.0032: probe with driver hid-generic failed with error -22 [ 266.365129][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.402030][ T4491] Bluetooth: hci3: command tx timeout [ 266.415063][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.429535][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.436785][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.464864][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.472106][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.522225][ T25] usb 1-1: USB disconnect, device number 25 [ 266.671574][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.750318][ T5100] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 266.752691][ T8106] veth0_vlan: entered promiscuous mode [ 266.787951][ T8106] veth1_vlan: entered promiscuous mode [ 266.859030][ T8106] veth0_macvtap: entered promiscuous mode [ 266.896794][ T8106] veth1_macvtap: entered promiscuous mode [ 266.950995][ T5100] usb 2-1: Using ep0 maxpacket: 16 [ 266.969221][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.995130][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.009459][ T5100] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 267.011881][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.035275][ T5100] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 267.057233][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.060486][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.076506][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.076532][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.076552][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.076569][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.076588][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.076604][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.085885][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.201893][ T29] audit: type=1326 audit(1720892870.064:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.3.708" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740f579 code=0x0 [ 267.235013][ T5100] usb 2-1: config 0 descriptor?? [ 267.254156][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.285566][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.320288][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.360914][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.402894][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.440145][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.492476][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.526023][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.556703][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.581493][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.599836][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.647335][ T8106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.666999][ T8106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.696470][ T8106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.720185][ T8106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.783560][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.818522][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.876859][ T5100] hid-generic 0003:0158:0100.0033: unknown main item tag 0x1 [ 267.910044][ T5100] hid-generic 0003:0158:0100.0033: unexpected long global item [ 267.936310][ T5100] hid-generic 0003:0158:0100.0033: probe with driver hid-generic failed with error -22 [ 268.114460][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.160648][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.361207][ T5146] usb 2-1: USB disconnect, device number 39 [ 268.383324][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.463364][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.480469][ T4491] Bluetooth: hci3: command tx timeout [ 268.990229][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 269.028540][ T8249] syz.4.711 (8249): drop_caches: 1 [ 269.150463][ T8261] netlink: 'syz.2.678': attribute type 12 has an invalid length. [ 269.171203][ T8261] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.678'. [ 269.220046][ T8264] FAULT_INJECTION: forcing a failure. [ 269.220046][ T8264] name failslab, interval 1, probability 0, space 0, times 0 [ 269.224753][ T25] usb 4-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 269.282187][ T8264] CPU: 0 PID: 8264 Comm: syz.4.716 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 269.292235][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 269.302329][ T8264] Call Trace: [ 269.305647][ T8264] [ 269.308606][ T8264] dump_stack_lvl+0x241/0x360 [ 269.311278][ T25] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 269.313322][ T8264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.328746][ T8264] ? __pfx__printk+0x10/0x10 [ 269.333393][ T8264] ? __pfx_validate_chain+0x10/0x10 [ 269.336979][ T25] usb 4-1: config 16 has no interfaces? [ 269.338623][ T8264] should_fail_ex+0x3b0/0x4e0 [ 269.348907][ T8264] ? skb_clone+0x20c/0x390 [ 269.353377][ T8264] should_failslab+0x9/0x20 [ 269.355474][ T25] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 269.357901][ T8264] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 269.357940][ T8264] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 269.357972][ T8264] skb_clone+0x20c/0x390 [ 269.367190][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.372414][ T8264] ? __skb_tstamp_tx+0x16a/0xab0 [ 269.372449][ T8264] __skb_tstamp_tx+0x17f/0xab0 [ 269.400392][ T8264] ? __local_bh_enable_ip+0x168/0x200 [ 269.405788][ T8264] __dev_queue_xmit+0x2087/0x3d30 [ 269.410851][ T8264] ? __pfx___dev_queue_xmit+0x10/0x10 [ 269.416247][ T8264] ? __pfx_lock_acquire+0x10/0x10 [ 269.421292][ T8264] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 269.427290][ T8264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.433629][ T8264] ? ip_finish_output2+0xa14/0x1380 [ 269.438844][ T8264] ? ip_finish_output2+0x45f/0x1380 [ 269.444059][ T8264] ip_finish_output2+0xd41/0x1380 [ 269.449101][ T8264] ? ip_finish_output2+0x45f/0x1380 [ 269.454320][ T8264] ? __pfx_ip_finish_output2+0x10/0x10 [ 269.459795][ T8264] ? ip_fast_csum+0x1f0/0x2b0 [ 269.464482][ T8264] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 269.469428][ T8264] ? __ip_finish_output+0x347/0x400 [ 269.474672][ T8264] ip_send_skb+0x74/0x100 [ 269.479112][ T8264] udp_send_skb+0xaa4/0x1470 [ 269.483817][ T8264] udp_sendmsg+0x1c21/0x2a60 [ 269.488432][ T8264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 269.493990][ T8264] ? __pfx_udp_sendmsg+0x10/0x10 [ 269.498962][ T8264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.505325][ T8264] ? __local_bh_enable_ip+0x168/0x200 [ 269.510714][ T8264] ? inet_sendmsg+0x16b/0x390 [ 269.515419][ T8264] ? do_raw_spin_unlock+0x13c/0x8b0 [ 269.520660][ T8264] ? inet_sendmsg+0x2ba/0x390 [ 269.525364][ T8264] __sock_sendmsg+0x1a6/0x270 [ 269.530057][ T8264] ____sys_sendmsg+0x525/0x7d0 [ 269.534849][ T8264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.540175][ T8264] __sys_sendmmsg+0x4af/0x740 [ 269.544902][ T8264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 269.550132][ T8264] ? __pfx_lock_acquire+0x10/0x10 [ 269.555176][ T8264] ? get_pid_task+0x23/0x1f0 [ 269.559777][ T8264] ? __pfx_lock_release+0x10/0x10 [ 269.564815][ T8264] ? kstrtouint_from_user+0x128/0x190 [ 269.570232][ T8264] ? __pfx_lock_release+0x10/0x10 [ 269.575280][ T8264] ? __mutex_unlock_slowpath+0x21d/0x750 [ 269.581030][ T8264] ? __fget_files+0x3f6/0x470 [ 269.585739][ T8264] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 269.591736][ T8264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 269.598079][ T8264] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 269.603637][ T8264] __do_fast_syscall_32+0xb4/0x120 [ 269.608766][ T8264] ? exc_page_fault+0x590/0x8c0 [ 269.613639][ T8264] do_fast_syscall_32+0x34/0x80 [ 269.618514][ T8264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.624852][ T8264] RIP: 0023:0xf7404579 [ 269.628935][ T8264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 269.648731][ T8264] RSP: 002b:00000000f5d1d57c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 269.657160][ T8264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003240 [ 269.665158][ T8264] RDX: 0000000000000001 RSI: 0000000004000800 RDI: 0000000000000000 [ 269.673136][ T8264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.681115][ T8264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 269.689090][ T8264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.697084][ T8264] [ 269.700178][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.900608][ T5163] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 270.122356][ T5163] usb 3-1: Using ep0 maxpacket: 16 [ 270.152990][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 270.215488][ T5163] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 270.253152][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.298580][ T5163] usb 3-1: config 0 descriptor?? [ 270.440235][ T29] audit: type=1326 audit(1720892873.304:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.4.721" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7404579 code=0x0 [ 270.440420][ T5147] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 270.661337][ T5147] usb 1-1: Using ep0 maxpacket: 16 [ 270.683327][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 270.710891][ T5147] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 270.740471][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.773898][ T5147] usb 1-1: config 0 descriptor?? [ 270.833998][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.869251][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.907002][ T5163] hid (null): nested delimiters [ 270.928240][ T5163] hid (null): unknown global tag 0x83 [ 270.934775][ T5163] hid (null): unknown global tag 0xc [ 270.942458][ T5163] hid (null): global environment stack underflow [ 270.959273][ T5163] hid-generic 0003:0158:0100.0034: unknown main item tag 0x1 [ 270.968069][ T5163] hid-generic 0003:0158:0100.0034: nested delimiters [ 270.999930][ T5163] hid-generic 0003:0158:0100.0034: item 0 2 2 10 parsing failed [ 271.008929][ T5163] hid-generic 0003:0158:0100.0034: probe with driver hid-generic failed with error -22 [ 271.144017][ T5163] usb 3-1: USB disconnect, device number 35 [ 271.288598][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.298011][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.328448][ T5147] hid-generic 0003:0158:0100.0035: unknown main item tag 0x1 [ 271.360612][ T5147] hid-generic 0003:0158:0100.0035: unexpected long global item [ 271.379242][ T5147] hid-generic 0003:0158:0100.0035: probe with driver hid-generic failed with error -22 [ 271.599869][ T25] usb 1-1: USB disconnect, device number 26 [ 271.738289][ T8316] FAULT_INJECTION: forcing a failure. [ 271.738289][ T8316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.759336][ T8316] CPU: 0 PID: 8316 Comm: syz.1.726 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 271.769651][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.779864][ T8316] Call Trace: [ 271.783197][ T8316] [ 271.786177][ T8316] dump_stack_lvl+0x241/0x360 [ 271.790923][ T8316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.796270][ T8316] ? __pfx__printk+0x10/0x10 [ 271.801024][ T8316] should_fail_ex+0x3b0/0x4e0 [ 271.805767][ T8316] __kvm_read_guest_page+0x168/0x1f0 [ 271.811284][ T8316] kvm_fetch_guest_virt+0x12a/0x170 [ 271.816541][ T8316] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 271.822351][ T8316] __do_insn_fetch_bytes+0x341/0x7b0 [ 271.827704][ T8316] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 271.833587][ T8316] ? __lock_acquire+0x1346/0x1fd0 [ 271.838675][ T8316] x86_decode_insn+0x366/0x4a10 [ 271.843594][ T8316] ? __pfx_validate_chain+0x10/0x10 [ 271.848844][ T8316] ? rcu_qs+0xf1/0x190 [ 271.852980][ T8316] ? __asan_memset+0x23/0x50 [ 271.857748][ T8316] ? __pfx_x86_decode_insn+0x10/0x10 [ 271.863097][ T8316] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.869133][ T8316] x86_emulate_instruction+0x2b5/0x1ad0 [ 271.874738][ T8316] ? vmx_vcpu_run+0xc85/0x2470 [ 271.879567][ T8316] ? __lock_acquire+0x1346/0x1fd0 [ 271.884640][ T8316] handle_ud+0x2e4/0x4c0 [ 271.889036][ T8316] ? __pfx_handle_ud+0x10/0x10 [ 271.893868][ T8316] ? handle_exception_nmi+0x198/0xee0 [ 271.899292][ T8316] ? __pfx_handle_exception_nmi+0x10/0x10 [ 271.905322][ T8316] vmx_handle_exit+0x11f1/0x1f80 [ 271.910317][ T8316] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 271.916353][ T8316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.922748][ T8316] vcpu_run+0x6ad0/0x87f0 [ 271.927132][ T8316] ? __lock_acquire+0x1346/0x1fd0 [ 271.932221][ T8316] ? vcpu_run+0x5595/0x87f0 [ 271.936817][ T8316] ? vmx_vcpu_pi_load+0x13b/0x8c0 [ 271.941920][ T8316] ? __pfx_vcpu_run+0x10/0x10 [ 271.946655][ T8316] ? __local_bh_enable_ip+0x168/0x200 [ 271.952072][ T8316] ? lockdep_hardirqs_on+0x99/0x150 [ 271.957759][ T8316] ? __pfx_lock_acquire+0x10/0x10 [ 271.962825][ T8316] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 271.968155][ T8316] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 271.973923][ T8316] ? xfd_validate_state+0x6e/0x150 [ 271.979087][ T8316] ? rcu_is_watching+0x15/0xb0 [ 271.983908][ T8316] ? rcu_is_watching+0x15/0xb0 [ 271.988731][ T8316] kvm_arch_vcpu_ioctl_run+0xa7e/0x1920 [ 271.994349][ T8316] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920 [ 272.000113][ T8316] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 272.006138][ T8316] ? __mutex_trylock_common+0x183/0x2e0 [ 272.011733][ T8316] ? __pfx___might_resched+0x10/0x10 [ 272.017078][ T8316] ? __pfx___mutex_trylock_common+0x10/0x10 [ 272.023035][ T8316] ? rcu_is_watching+0x15/0xb0 [ 272.027843][ T8316] ? trace_contention_end+0x3c/0x120 [ 272.033264][ T8316] ? __mutex_lock+0x2ef/0xd70 [ 272.037991][ T8316] ? __pfx_lock_release+0x10/0x10 [ 272.043151][ T8316] ? kvm_vcpu_ioctl+0x1d9/0xd00 [ 272.048048][ T8316] ? __pfx___mutex_lock+0x10/0x10 [ 272.053128][ T8316] ? tomoyo_path_number_perm+0x71a/0x880 [ 272.058809][ T8316] ? __lock_acquire+0x1346/0x1fd0 [ 272.063885][ T8316] kvm_vcpu_ioctl+0x7f5/0xd00 [ 272.068624][ T8316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.074664][ T8316] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.079988][ T8316] kvm_vcpu_compat_ioctl+0x242/0x450 [ 272.085332][ T8316] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 272.091187][ T8316] ? __fget_files+0x3f6/0x470 [ 272.095922][ T8316] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 272.101511][ T8316] ? security_file_ioctl_compat+0x87/0xb0 [ 272.107288][ T8316] __se_compat_sys_ioctl+0x51c/0xca0 [ 272.112688][ T8316] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 272.118564][ T8316] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.124626][ T8316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.131097][ T8316] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 272.137774][ T8316] ? lockdep_hardirqs_on+0x99/0x150 [ 272.143033][ T8316] __do_fast_syscall_32+0xb4/0x120 [ 272.148209][ T8316] ? exc_page_fault+0x590/0x8c0 [ 272.153303][ T8316] do_fast_syscall_32+0x34/0x80 [ 272.158206][ T8316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.164579][ T8316] RIP: 0023:0xf740b579 [ 272.168777][ T8316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 272.188440][ T8316] RSP: 002b:00000000f5d2457c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 272.196953][ T8316] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 272.204967][ T8316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.212977][ T8316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.221006][ T8316] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.229021][ T8316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.237138][ T8316] [ 272.240306][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.313201][ T30] INFO: task kworker/0:9:5166 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 272.360199][ T30] Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 272.368100][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.409796][ T30] task:kworker/0:9 state:D stack:21344 pid:5166 tgid:5166 ppid:2 flags:0x00004000 [ 272.426552][ T30] Workqueue: usb_hub_wq hub_event [ 272.432101][ T30] Call Trace: [ 272.435429][ T30] [ 272.438411][ T30] __schedule+0x17e8/0x4a20 [ 272.450762][ T30] ? __pfx___schedule+0x10/0x10 [ 272.455770][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.502502][ T30] ? __pfx_lock_release+0x10/0x10 [ 272.507675][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.534292][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 272.539587][ T30] ? schedule+0x90/0x320 [ 272.560278][ T30] schedule+0x14b/0x320 [ 272.564529][ T30] schedule_timeout+0xb0/0x310 [ 272.576562][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 272.611345][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.617427][ T30] ? wait_for_completion+0x2fe/0x620 [ 272.654466][ T30] ? wait_for_completion+0x2fe/0x620 [ 272.659892][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 272.668865][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 272.674279][ T30] ? wait_for_completion+0x2fe/0x620 [ 272.679623][ T30] wait_for_completion+0x355/0x620 [ 272.684891][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 272.690857][ T30] ? __init_swait_queue_head+0xae/0x150 [ 272.697901][ T30] snd_card_free+0x12a/0x190 [ 272.708969][ T30] ? __pfx_snd_card_free+0x10/0x10 [ 272.718801][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 272.740263][ T30] usb_unbind_interface+0x25e/0x940 [ 272.746421][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 272.759523][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 272.765712][ T30] device_release_driver_internal+0x503/0x7c0 [ 272.779566][ T30] bus_remove_device+0x34f/0x420 [ 272.784752][ T30] device_del+0x57a/0x9b0 [ 272.789153][ T30] ? __pfx_device_del+0x10/0x10 [ 272.803989][ T30] ? usb_disconnect+0x103/0x950 [ 272.808943][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.816378][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 272.826517][ T30] usb_disable_device+0x3bf/0x850 [ 272.832085][ T30] usb_disconnect+0x340/0x950 [ 272.836847][ T30] hub_event+0x1eb9/0x5150 [ 272.841907][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 272.847730][ T30] ? __pfx_hub_event+0x10/0x10 [ 272.853199][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 272.859872][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 272.866543][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.873391][ T30] ? process_scheduled_works+0x945/0x1830 [ 272.879222][ T30] process_scheduled_works+0xa2c/0x1830 [ 272.889212][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 272.895833][ T30] ? assign_work+0x364/0x3d0 [ 272.903253][ T30] worker_thread+0x86d/0xd50 [ 272.907936][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 272.914508][ T30] ? __kthread_parkme+0x169/0x1d0 [ 272.919597][ T30] ? __pfx_worker_thread+0x10/0x10 [ 272.925331][ T30] kthread+0x2f0/0x390 [ 272.929454][ T30] ? __pfx_worker_thread+0x10/0x10 [ 272.939526][ T30] ? __pfx_kthread+0x10/0x10 [ 272.944630][ T30] ret_from_fork+0x4b/0x80 [ 272.949112][ T30] ? __pfx_kthread+0x10/0x10 [ 272.954350][ T30] ret_from_fork_asm+0x1a/0x30 [ 272.959205][ T30] [ 272.971307][ T30] INFO: task syz.4.258:5938 blocked for more than 144 seconds. [ 272.978926][ T30] Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 272.987507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.003802][ T30] task:syz.4.258 state:D stack:26128 pid:5938 tgid:5937 ppid:5105 flags:0x20000004 [ 273.014655][ T30] Call Trace: [ 273.018010][ T30] [ 273.021496][ T30] __schedule+0x17e8/0x4a20 [ 273.026074][ T30] ? __pfx___schedule+0x10/0x10 [ 273.031255][ T30] ? __pfx_lock_release+0x10/0x10 [ 273.036316][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 273.047372][ T30] ? schedule+0x90/0x320 [ 273.052506][ T30] schedule+0x14b/0x320 [ 273.056731][ T30] schedule_preempt_disabled+0x13/0x30 [ 273.062672][ T30] __mutex_lock+0x6a4/0xd70 [ 273.067229][ T30] ? __mutex_lock+0x527/0xd70 [ 273.072104][ T30] ? usbdev_open+0x156/0x780 [ 273.076804][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 273.082141][ T30] ? bus_find_device+0x29b/0x2f0 [ 273.087143][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 273.092543][ T30] ? usbdev_open+0xa8/0x780 [ 273.097083][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 273.102571][ T30] usbdev_open+0x156/0x780 [ 273.108709][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 273.113762][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 273.118998][ T30] ? __pfx_exact_match+0x10/0x10 [ 273.124142][ T30] ? module_put+0x13a/0x2d0 [ 273.128689][ T30] chrdev_open+0x5b0/0x630 [ 273.133237][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 273.138226][ T30] ? security_file_open+0x51a/0x750 [ 273.143583][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 273.148562][ T30] do_dentry_open+0x970/0x1450 [ 273.153454][ T30] vfs_open+0x3e/0x330 [ 273.157584][ T30] path_openat+0x2c01/0x35f0 [ 273.163561][ T30] ? mark_lock+0x9a/0x350 [ 273.167946][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 273.173100][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 273.178185][ T30] ? __pfx_path_openat+0x10/0x10 [ 273.183274][ T30] do_filp_open+0x235/0x490 [ 273.187820][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 273.193001][ T30] ? _raw_spin_unlock+0x28/0x50 [ 273.197890][ T30] ? alloc_fd+0x5a1/0x640 [ 273.202646][ T30] do_sys_openat2+0x13e/0x1d0 [ 273.209380][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.214728][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 273.220404][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 273.226559][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.233310][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 273.238547][ T30] __do_fast_syscall_32+0xb4/0x120 [ 273.243795][ T30] ? exc_page_fault+0x590/0x8c0 [ 273.248685][ T30] do_fast_syscall_32+0x34/0x80 [ 273.253670][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.260058][ T30] RIP: 0023:0xf73cd579 [ 273.264228][ T30] RSP: 002b:00000000f5ce6120 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 273.273056][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5ce6170 [ 273.290059][ T30] RDX: 0000000000088401 RSI: 0000000000000000 RDI: 00000000f73b8ff4 [ 273.298224][ T30] RBP: 0000000000088401 R08: 0000000000000000 R09: 0000000000000000 [ 273.306776][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.317220][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.325400][ T30] [ 273.350219][ T30] [ 273.350219][ T30] Showing all locks held in the system: [ 273.358058][ T30] 1 lock held by khungtaskd/30: [ 273.460185][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 273.520715][ T30] 2 locks held by getty/4851: [ 273.525588][ T30] #0: ffff88802ae570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 273.570153][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 273.607763][ T5146] usb 4-1: USB disconnect, device number 34 [ 273.613798][ T30] 3 locks held by kworker/1:4/5146: [ 273.647484][ T30] #0: ffff8880186aa548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 273.680773][ T30] #1: ffffc900048dfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 273.730174][ T30] #2: ffff888023fce190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 273.739197][ T30] 5 locks held by kworker/0:9/5166: [ 273.770157][ T30] #0: ffff8880186aa548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 273.797405][ T30] #1: ffffc90004cdfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 273.840149][ T30] #2: ffff888023fee190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 273.849143][ T30] #3: ffff88807de49190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 273.878206][ T30] #4: ffff88802d529160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 273.896294][ T30] 1 lock held by syz.4.258/5938: [ 273.901598][ T30] #0: ffff888023fee190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x156/0x780 [ 273.917930][ T30] 3 locks held by kworker/1:7/6785: [ 273.926001][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 273.938808][ T30] #1: ffffc900032d7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 273.949432][ T30] #2: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 273.960710][ T30] 3 locks held by syz-executor/7740: [ 273.966044][ T30] #0: ffff8880230ccd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 273.976526][ T30] #1: ffff8880230cc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 273.990407][ T30] #2: ffffffff8f754ec8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 274.010942][ T30] 3 locks held by syz-executor/8106: [ 274.016300][ T30] #0: ffff88807cd9cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 274.027861][ T30] #1: ffff88807cd9c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 274.037709][ T30] #2: ffffffff8f754ec8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 274.047885][ T30] 4 locks held by syz.0.719/8277: [ 274.053107][ T30] #0: ffff888057c10d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 274.063176][ T30] #1: ffff888057c10078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 274.072969][ T30] #2: ffffffff8f754ec8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 274.083831][ T30] #3: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 274.095279][ T30] 3 locks held by syz.4.725/8312: [ 274.103940][ T30] #0: ffff88802dc00d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 274.114054][ T30] #1: ffff88802dc00078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 274.124405][ T30] #2: ffffffff8f754ec8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 274.136826][ T30] 1 lock held by syz.1.726/8314: [ 274.142311][ T30] #0: ffffffff8e3391c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 274.152483][ T30] [ 274.154921][ T30] ============================================= [ 274.154921][ T30] [ 274.163894][ T30] NMI backtrace for cpu 0 [ 274.168255][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 274.178176][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 274.188326][ T30] Call Trace: [ 274.191615][ T30] [ 274.194546][ T30] dump_stack_lvl+0x241/0x360 [ 274.199249][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.204464][ T30] ? __pfx__printk+0x10/0x10 [ 274.209061][ T30] ? vprintk_emit+0x631/0x770 [ 274.213764][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 274.218832][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 274.223811][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 274.229307][ T30] ? _printk+0xd5/0x120 [ 274.233502][ T30] ? __pfx__printk+0x10/0x10 [ 274.238111][ T30] ? __wake_up_klogd+0xcc/0x110 [ 274.242972][ T30] ? __pfx__printk+0x10/0x10 [ 274.247658][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 274.252696][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 274.258696][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 274.264701][ T30] watchdog+0xfde/0x1020 [ 274.268975][ T30] ? watchdog+0x1ea/0x1020 [ 274.273463][ T30] ? __pfx_watchdog+0x10/0x10 [ 274.278206][ T30] kthread+0x2f0/0x390 [ 274.282315][ T30] ? __pfx_watchdog+0x10/0x10 [ 274.287023][ T30] ? __pfx_kthread+0x10/0x10 [ 274.291643][ T30] ret_from_fork+0x4b/0x80 [ 274.296078][ T30] ? __pfx_kthread+0x10/0x10 [ 274.300711][ T30] ret_from_fork_asm+0x1a/0x30 [ 274.305511][ T30] [ 274.308659][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.316496][ T30] Sending NMI from CPU 0 to CPUs 1: [ 274.323516][ C1] NMI backtrace for cpu 1 [ 274.323530][ C1] CPU: 1 PID: 24 Comm: ksoftirqd/1 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 274.323551][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 274.323562][ C1] RIP: 0010:preempt_count_add+0x9/0x190 [ 274.323598][ C1] Code: 24 e8 8b 51 96 00 eb 8c e9 ee fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <89> fb 48 c7 c0 e0 56 7a 94 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff [ 274.323614][ C1] RSP: 0018:ffffc900001e7300 EFLAGS: 00000202 [ 274.323630][ C1] RAX: 0000000080000100 RBX: ffffc900001e7498 RCX: ffff8880176f8000 [ 274.323645][ C1] RDX: ffff8880176f8000 RSI: 0000000000000001 RDI: 0000000000000001 [ 274.323657][ C1] RBP: ffffc900001e7460 R08: ffffffff8140f091 R09: 0000000000000000 [ 274.323671][ C1] R10: ffffc900001e7460 R11: fffff5200003ce98 R12: ffffc900001e74f8 [ 274.323685][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff8141226c [ 274.323698][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 274.323714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.323727][ C1] CR2: 000055d0d7dbc000 CR3: 000000007d958000 CR4: 00000000003526f0 [ 274.323743][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 274.323755][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 274.323767][ C1] Call Trace: [ 274.323773][ C1] [ 274.323781][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 274.323803][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 274.323826][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 274.323846][ C1] ? nmi_handle+0x2a/0x5a0 [ 274.323882][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 274.323904][ C1] ? nmi_handle+0x14f/0x5a0 [ 274.323932][ C1] ? nmi_handle+0x2a/0x5a0 [ 274.323961][ C1] ? preempt_count_add+0x9/0x190 [ 274.323988][ C1] ? default_do_nmi+0x63/0x160 [ 274.324010][ C1] ? exc_nmi+0x123/0x1f0 [ 274.324030][ C1] ? end_repeat_nmi+0xf/0x53 [ 274.324046][ C1] ? __unwind_start+0x2bc/0x7c0 [ 274.324074][ C1] ? unwind_next_frame+0xa1/0x2a00 [ 274.324101][ C1] ? preempt_count_add+0x9/0x190 [ 274.324129][ C1] ? preempt_count_add+0x9/0x190 [ 274.324159][ C1] ? preempt_count_add+0x9/0x190 [ 274.324187][ C1] [ 274.324193][ C1] [ 274.324200][ C1] ? __unwind_start+0x2bc/0x7c0 [ 274.324224][ C1] unwind_next_frame+0xc1/0x2a00 [ 274.324250][ C1] ? validate_chain+0x11e/0x5900 [ 274.324276][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 274.324299][ C1] ? get_stack_info+0x102/0x180 [ 274.324325][ C1] __unwind_start+0x641/0x7c0 [ 274.324353][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.324384][ C1] arch_stack_walk+0x103/0x1b0 [ 274.324415][ C1] ? __unwind_start+0x2bc/0x7c0 [ 274.324443][ C1] stack_trace_save+0x118/0x1d0 [ 274.324480][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 274.324518][ C1] kasan_save_track+0x3f/0x80 [ 274.324567][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 274.324593][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 274.324620][ C1] kasan_save_free_info+0x40/0x50 [ 274.324637][ C1] poison_slab_object+0xe0/0x150 [ 274.324660][ C1] __kasan_slab_free+0x37/0x60 [ 274.324682][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 274.324709][ C1] kfree+0x149/0x360 [ 274.324737][ C1] ref_tracker_free+0x4ef/0x7e0 [ 274.324767][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.324795][ C1] ? __sk_destruct+0x37d/0x5f0 [ 274.324818][ C1] ? rcu_core+0xafd/0x1830 [ 274.324835][ C1] ? handle_softirqs+0x2c4/0x970 [ 274.324852][ C1] ? run_ksoftirqd+0xca/0x130 [ 274.324871][ C1] ? smpboot_thread_fn+0x544/0xa30 [ 274.324889][ C1] ? kthread+0x2f0/0x390 [ 274.324910][ C1] ? ret_from_fork+0x4b/0x80 [ 274.324934][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 274.324968][ C1] ? bpf_sk_storage_free+0x1c/0x280 [ 274.324994][ C1] __sk_destruct+0x37d/0x5f0 [ 274.325018][ C1] ? rcu_core+0xa86/0x1830 [ 274.325035][ C1] ? __pfx_deferred_put_nlk_sk+0x10/0x10 [ 274.325063][ C1] rcu_core+0xafd/0x1830 [ 274.325090][ C1] ? __pfx_rcu_core+0x10/0x10 [ 274.325111][ C1] ? rcu_qs+0xf1/0x190 [ 274.325129][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 274.325147][ C1] ? sched_clock_cpu+0x76/0x490 [ 274.325175][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.325196][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.325222][ C1] handle_softirqs+0x2c4/0x970 [ 274.325243][ C1] ? run_ksoftirqd+0xca/0x130 [ 274.325266][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 274.325290][ C1] run_ksoftirqd+0xca/0x130 [ 274.325311][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 274.325333][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 274.325354][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 274.325371][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 274.325388][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 274.325407][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 274.325426][ C1] smpboot_thread_fn+0x544/0xa30 [ 274.325445][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 274.325472][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 274.325491][ C1] kthread+0x2f0/0x390 [ 274.325513][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 274.325531][ C1] ? __pfx_kthread+0x10/0x10 [ 274.325553][ C1] ret_from_fork+0x4b/0x80 [ 274.325577][ C1] ? __pfx_kthread+0x10/0x10 [ 274.325599][ C1] ret_from_fork_asm+0x1a/0x30 [ 274.325633][ C1] [ 274.332326][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 274.332346][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 274.332374][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 274.332389][ T30] Call Trace: [ 274.332398][ T30] [ 274.332409][ T30] dump_stack_lvl+0x241/0x360 [ 274.332453][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.332489][ T30] ? __pfx__printk+0x10/0x10 [ 274.332521][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.332555][ T30] ? vscnprintf+0x5d/0x90 [ 274.332585][ T30] panic+0x349/0x860 [ 274.332620][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 274.332650][ T30] ? __pfx_panic+0x10/0x10 [ 274.332680][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 274.332739][ T30] ? __irq_work_queue_local+0x137/0x410 [ 274.332767][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 274.332793][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 274.332825][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 274.332856][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 274.332887][ T30] watchdog+0x101d/0x1020 [ 274.332917][ T30] ? watchdog+0x1ea/0x1020 [ 274.332950][ T30] ? __pfx_watchdog+0x10/0x10 [ 274.332978][ T30] kthread+0x2f0/0x390 [ 274.333008][ T30] ? __pfx_watchdog+0x10/0x10 [ 274.333034][ T30] ? __pfx_kthread+0x10/0x10 [ 274.333065][ T30] ret_from_fork+0x4b/0x80 [ 274.333096][ T30] ? __pfx_kthread+0x10/0x10 [ 274.333125][ T30] ret_from_fork_asm+0x1a/0x30 [ 274.333175][ T30] [ 274.334761][ T30] Kernel Offset: disabled [ 275.004518][ T30] Rebooting in 86400 seconds..