last executing test programs: 4m59.719289088s ago: executing program 1 (id=1095): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010001fff000000001800000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100767469"], 0x48}}, 0x0) 4m59.447935328s ago: executing program 1 (id=1096): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x38011, r3, 0xa03bb000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xa0a00, 0x0) (async) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4, 0x10100, 0x0, 0x1e}, &(0x7f0000000440)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x5c}}, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x802) cachestat(r2, &(0x7f0000000040)={0x4, 0xa500}, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x2000400c) 4m59.198067954s ago: executing program 1 (id=1099): unshare(0x24040680) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001a40)={0x0, 0xffff1000, 0x0, r2, 0x5}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfffffc8f) r6 = getpgrp(0x0) capset(&(0x7f0000000200)={0x20071026, r6}, &(0x7f0000000180)={0x2, 0xfffffffe, 0x804, 0x1, 0x8, 0x4085}) splice(r3, 0x0, r5, 0x0, 0x1800, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x3, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) timer_create(0x3ca51e74f98eaf6c, &(0x7f0000000100)={0x0, 0x24, 0x1, @tid=r8}, &(0x7f0000000140)) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000240)={0x2, 0xa, 0x2, "0707878129100a179c032732cf1058b6cfe5da6fcd1a09fe13e20e92076eabbd", 0x20363159}) 4m58.019261533s ago: executing program 1 (id=1107): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @random="4b16a2488c32"}) syz_usb_connect(0x0, 0x5f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b1f203401e090300ffff0102030109029dbccf42523d96aa6a7e08457a01ade4724b3a538b7ae20f94c1", @ANYRES8=r0, @ANYRES32=r0], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0x1911, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"fe403ca4", 0x0, 0x5, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", "e75aef41", ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66d59cea6bb67af44fa6da"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xfffd, 0x0, 0x0, 0xfff7f038}]}, 0x10) r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000100)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x8, @local, 'team0\x00'}}, 0x1e) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x76e5467) write(r2, 0x0, 0xfffffc80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m54.880513526s ago: executing program 1 (id=1124): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x7}}, r1, 0x3}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @local}, {0xa, 0x0, 0xffff, @loopback, 0xbe}, r1, 0x20000000}}, 0x48) socketpair$unix(0x1, 0x4000000000002, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000047c997ef9c299788599e1ec65a220100000001000000914a1eb2c5818bac3cd7b616093e0bf0a11093d4c8757b65246f801ed949013e0a12a547fc50083fe930f55527153b1736ed70b92f49fdc0fbe58fedf13a98eae34d1defcb9375373dd58996409e86e27237615d75072f0d924e60b4b3c57f8b75c14c2d7f8126b27f57ecdc2b71a1375f7830bcca20c1d03d8a6765021df6e3", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)="4f3bfde51b257f", 0x7}], 0x1) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000280)=""/164, 0xa4, 0x25) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0xb, @sdr}) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4m54.281455016s ago: executing program 1 (id=1128): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) timer_delete(0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x6e, 0xfd, 0xbc, 0x40, 0x1199, 0x9005, 0x18d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x51, 0xe4, 0xae, 0x1}}, {{0x9, 0x4, 0xc1, 0x4, 0x0, 0xff, 0xff, 0xff, 0x9}}, {{0x9, 0x4, 0x9d, 0x1, 0x0, 0xad, 0x29, 0x66, 0x8, [@generic={0x9, 0x4, "b63651de135f48"}]}}, {{0x9, 0x4, 0xbd, 0xfa, 0x0, 0x2e, 0x3a, 0xb2, 0x4}}]}}]}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ufshcd_clk_scaling\x00', r6, 0x0, 0xe}, 0x18) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 27.22323843s ago: executing program 0 (id=1730): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x224020, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000400)="f30f7f28c4e2919e38b9d90100000f32c744240000100000c74424020c000000c7442406000000000f011c24c4c22598de0f01c8c744240000000000c744240200300000c7442406000000000f01142466b8fa008ee0b9280a00000f320f22c7", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 25.078842741s ago: executing program 0 (id=1739): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @random="4b16a2488c32"}) syz_usb_connect(0x0, 0x5f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b1f203401e090300ffff0102030109029dbccf42523d96aa6a7e08457a", @ANYRES8=r0, @ANYRES32=r0], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xfffd, 0x0, 0x0, 0xfff7f038}]}, 0x10) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000100)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x8, @local, 'team0\x00'}}, 0x1e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r5, &(0x7f0000000080), 0x76e5467) write(r2, 0x0, 0xfffffc80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12.727239385s ago: executing program 3 (id=1769): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x100000001, 0x880) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000200)={0xb, 0x50, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004ec2b5202c040575a83200000001090212000100000000"], 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000181401000000000000000000080004"], 0x20}}, 0x0) 10.104791368s ago: executing program 4 (id=1773): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001200)={0x5, &(0x7f00000011c0)=[{0x8, 0x0, 0xfc, 0x2}, {0x2, 0x9, 0x40, 0x7}, {0x1, 0xf, 0x9}, {0x6, 0x8, 0x5, 0xe4f6}, {0x1000, 0xa, 0x1, 0x3}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x88d4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001280)={0x1, &(0x7f0000000000)=[{0xff80, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000000c0)={r6, 0x7fffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r6, 0x1, r4, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000001240)={r6, 0x3, r0, 0x6}) readv(r0, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/4080, 0xff0}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f0000001380)=""/248, 0xf8}], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1040, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, r12}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r13 = syz_open_pts(r0, 0x801) r14 = dup3(r13, r0, 0x0) write$char_usb(r14, &(0x7f00000000c0)="7151171e5b6dd2a7bfcdbfd2fdc2ee76133be46f84b9084b48401ec6ae3d5720a14a299922f3a7d675c85e92c353bb9f86998434c08b83bf04b7146418bcb8c76b", 0x41) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x8) 9.490716573s ago: executing program 3 (id=1774): futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1, 0x0, 0x20}}}}}}, 0x0) 9.418467924s ago: executing program 3 (id=1775): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x78, 0x0, &(0x7f00000008c0)="b8b7f9c4606df22d4f83b2de94e16f336eb9a1a9cbb1e3c26e679cb7d4a60e207f59bfa09e6410e4d3333e52eb5a52320512916150751aa705aedaf49e7f75d3c1af425dedc523b80899f997b4a034a9bf5b9a5984a565de2bfa24a01d37b82e4a639a5b0ec06bd3e1c10088bb719c5d2dbd55a7b7420513"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x7}]}]}, 0x34}}, 0xc000) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.47490929s ago: executing program 3 (id=1776): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x1, 0x1, 0xfffffffb}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x101802, 0x0) getsockname$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00150000000000ed000f0000000000002e6d4e8a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000001100)=0x90000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_clone3(&(0x7f00000000c0)={0xc8080000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@host}) 8.463185392s ago: executing program 4 (id=1777): dup(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket(0x15, 0x800, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c9"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x3, 0x0, 0x9}, {0x10001, 0xe171, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x0, 0x4, 0x0, 0x43}]}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.531002519s ago: executing program 3 (id=1779): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock2(&(0x7f00003ed000/0x3000)=nil, 0x3000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000904000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r3, &(0x7f0000001ec0)=[{{0x0, 0xffffffffffffffa9, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1}, 0x4}], 0x1, 0x40010000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) 7.455281151s ago: executing program 4 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240), 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200048c0}, 0x810) 7.256410135s ago: executing program 4 (id=1781): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0xfffffffffffdffff, 0x80000005, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) syz_io_uring_setup(0x33b1, &(0x7f0000000140)={0x0, 0x2863, 0x8, 0x0, 0x2fc}, &(0x7f0000000080), &(0x7f0000000380)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000008c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @ipv6=@udp={0x6, 0x6, "e1b945", 0xd8, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x32, 0x2, 0x4, 0x1, 0x3, 0x8, 0x5b14, [@mcast2]}, @dstopts={0x62, 0x15, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x0, [0x198, 0x7, 0xb4]}}, @generic={0x5, 0x31, "d5b21a23d67a857703b5c8e6f2d63cc5f0c064ef4bdea12d5b876e9cba2722e16b159336730a2cc2c306370cdf6a816c63"}, @generic={0xff, 0x3d, "06b9f557bb8c78e0f4d70236e415f50bc489b51cd2fa60717323f4fc1e253133d89c4353453737df6a274afdafebe003f149a1b18ddb3191a9790c7d2b"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], {0x4e24, 0x4e23, 0x8}}}}, 0x10e) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000050000000000000000aa3a020201"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffe4a, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000040)=ANY=[]) syz_emit_ethernet(0x82, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x200]}, 0x8, 0x0) 5.663085945s ago: executing program 4 (id=1782): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ip6gre0\x00', @random="4b16a2488c32"}) syz_usb_connect(0x0, 0x5f, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b1f203401e090300ffff0102030109029dbccf42523d96aa6a7e08457a", @ANYRES8=r0, @ANYRES32=r0], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xfffd, 0x0, 0x0, 0xfff7f038}]}, 0x10) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000100)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x8, @local, 'team0\x00'}}, 0x1e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r5, &(0x7f0000000080), 0x76e5467) write(r2, 0x0, 0xfffffc80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.440007505s ago: executing program 2 (id=1783): futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1, 0x0, 0x20}}}}}}, 0x0) 4.794647768s ago: executing program 0 (id=1760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2, 0x4e21, 0x4, 0x4e20, 0x2, 0x2, 0xf0, 0x80, 0x3a, r1, r4}, {0xffffffff7fffffff, 0x7fffffffffffffff, 0xfe7e, 0xfffffffffffffffc, 0xe98, 0xa5, 0x5, 0x7256}, {0x3, 0x40, 0x8, 0x1}, 0x4, 0x6e6bba, 0x0, 0x1, 0x4, 0x2}, {{@in6=@private0, 0x4d3, 0x6c}, 0x2, @in=@multicast2, 0x3505, 0x4, 0x0, 0x3, 0x7ff, 0x8, 0x32}}, 0xe8) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000900)) r5 = socket$inet6(0xa, 0x6, 0x0) listen(r5, 0x80080400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "7f"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x34000}, 0x0) 4.751024076s ago: executing program 2 (id=1784): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001200)={0x5, &(0x7f00000011c0)=[{0x8, 0x0, 0xfc, 0x2}, {0x2, 0x9, 0x40, 0x7}, {0x1, 0xf, 0x9}, {0x6, 0x8, 0x5, 0xe4f6}, {0x7, 0x0, 0x7, 0xaff2}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x88d4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001280)={0x1, &(0x7f0000000000)=[{0xff80, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000000c0)={r6, 0x7fffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r6, 0x1, r4, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000001240)={r6, 0x3, r0, 0x6}) readv(r0, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/4080, 0xff0}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f0000001380)=""/248, 0xf8}], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1040, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, r12}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r13 = syz_open_pts(r0, 0x801) r14 = dup3(r13, r0, 0x0) write$char_usb(r14, &(0x7f00000000c0)="7151171e5b6dd2a7bfcdbfd2fdc2ee76133be46f84b9084b48401ec6ae3d5720a14a299922f3a7d675c85e92c353bb9f86998434c08b83bf04b7146418bcb8c76b", 0x41) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x8) 4.529601827s ago: executing program 0 (id=1785): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001200)={0x5, &(0x7f00000011c0)=[{0x8, 0x0, 0xfc, 0x2}, {0x2, 0x9, 0x40, 0x7}, {0x1, 0xf, 0x9}, {0x6, 0x8, 0x5, 0xe4f6}, {0x1000, 0xa, 0x1, 0x3}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x88d4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001280)={0x1, &(0x7f0000000000)=[{0xff80, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)={0x0}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000000c0)={r6, 0x7fffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r6, 0x1, r4, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000001240)={r6, 0x3, r0, 0x6}) readv(r0, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/4080, 0xff0}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f0000001380)=""/248, 0xf8}], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x1040, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, r12}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r13 = syz_open_pts(r0, 0x801) r14 = dup3(r13, r0, 0x0) write$char_usb(r14, &(0x7f00000000c0)="7151171e5b6dd2a7bfcdbfd2fdc2ee76133be46f84b9084b48401ec6ae3d5720a14a299922f3a7d675c85e92c353bb9f86998434c08b83bf04b7146418bcb8c76b", 0x41) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x8) 1.242964092s ago: executing program 0 (id=1786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000200002000000e000000100000000000000000200010000001c000000fb16000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 1.242502311s ago: executing program 3 (id=1787): socketpair$unix(0x1, 0x4fcaab7b035b4e91, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002deffff0100"], 0x0}, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x8}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3d, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="059d3c35dd2e76e55b58740b4e6cb77f04c3c53b1cc26130f518d05e6afe528ee4831e69043e849788ae80248efaddea2e2ec8b8c7cf696c64bf3fa4f30eb18c506657160cf4d173aea5b12c8217a2ed4297713010e8b1c4724aa387cb9f05cff7bb60c4be298d88adb1cdafbf6ed9860befeb193fb155ada14dfc654c847f0100e231c751998d9d8bbd49e2ebd975f161d21779970dc7", @ANYBLOB="01070000000000000000410000000e0001006e657464657673696d0000000f000200"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000226bd7000fcdbdf25000000000e00011d6e654707aac37464657673696d0000000f0002d96e657464657673696d00"/62], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200, 0xc, 0x3, 0xa}]}) (async) time(0x0) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = openat$cgroup_ro(r5, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) (async) syz_open_dev$video4linux(&(0x7f00000000c0), 0x10, 0x200000) (async) socket$xdp(0x2c, 0x3, 0x0) 1.241602817s ago: executing program 4 (id=1788): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a0000904000001030101000921000800012201", @ANYRES64], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e22050016000000020008001700"], 0x34}}, 0x0) 1.092887516s ago: executing program 2 (id=1789): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240), 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x200048c0}, 0x810) 815.258477ms ago: executing program 2 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007310bf000000000006000000000000009500000000010300"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 815.015318ms ago: executing program 0 (id=1791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = memfd_create(&(0x7f0000000840)='5\xae`u?CZ=c\xad\xf91\x12s\a\xd7\x1c\xf9+\x01', 0x6) fallocate(r2, 0x0, 0x1000000, 0x5) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000028c0)=""/219, 0xdb}], 0x1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xffffff7c, 0x21) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) syz_usb_connect(0x0, 0x271, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 575.277445ms ago: executing program 2 (id=1792): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, &(0x7f0000004e00)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1, 0x0, 0x20}}}}}}, 0x0) kernel console output (not intermixed with test programs): p mac addresses unique to avoid problems! [ 721.266764][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.277507][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.290298][T14378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.307116][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.314292][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.338991][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.350938][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.361144][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 721.373260][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.389231][T14378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.405437][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.412610][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.434962][T14378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.445138][T14378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.454455][T14378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.469999][T14378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.638043][T14441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.680396][T14460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.701321][T14041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.715588][T14041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.726175][ T5229] Bluetooth: hci1: command tx timeout [ 721.749118][T14460] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.781148][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.810833][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.818017][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.826182][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.866807][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.873986][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.913051][T14441] veth0_vlan: entered promiscuous mode [ 721.940042][T14441] veth1_vlan: entered promiscuous mode [ 722.042594][T14441] veth0_macvtap: entered promiscuous mode [ 722.091994][T14441] veth1_macvtap: entered promiscuous mode [ 722.170990][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.192906][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.212010][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.223626][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.245352][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.252340][T14525] fuse: Unknown parameter '0x0000000000000006' [ 722.278554][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.299071][T14441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.352808][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.377298][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.397557][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.411700][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.422089][T14441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.433037][T14441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.445727][T14441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.462469][T14460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.502310][T14441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.512859][T14441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.527473][T14441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.536710][T14441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.606861][ T5229] Bluetooth: hci3: command tx timeout [ 722.684713][T14460] veth0_vlan: entered promiscuous mode [ 722.710989][T14460] veth1_vlan: entered promiscuous mode [ 722.736080][T14041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.743961][T14041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.822015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.842436][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.883406][T14460] veth0_macvtap: entered promiscuous mode [ 722.913786][T14460] veth1_macvtap: entered promiscuous mode [ 722.978670][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.999044][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.013084][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.037733][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.050532][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.061934][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.072429][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.087772][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.129625][T14460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.179163][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.221545][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.246431][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.282239][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.310298][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.331270][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.342531][T14460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.367575][T14460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.393033][T14460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.493574][T11168] usb 4-1: USB disconnect, device number 99 [ 723.515766][T11168] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 723.559169][T14460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.581616][T14460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.600666][T14460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.642790][T14460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.962618][T14041] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.076890][ T46] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 724.113768][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.175428][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.197321][T14041] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.312412][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.327168][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.345191][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.384346][ T46] usb 3-1: config 0 has no interfaces? [ 724.404886][T14041] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.449742][ T46] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 724.467406][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.546098][ T46] usb 3-1: Product: syz [ 724.582583][ T46] usb 3-1: Manufacturer: syz [ 724.635061][ T46] usb 3-1: SerialNumber: syz [ 724.641976][ T936] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 724.677283][ T46] usb 3-1: config 0 descriptor?? [ 724.692023][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 724.701228][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.709747][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.719240][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.732668][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 724.746211][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.748416][T14041] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.813816][ T936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.834029][ T936] usb 4-1: config 0 has no interfaces? [ 724.849323][ T936] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 724.857720][T11819] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 724.859208][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.874590][ T936] usb 4-1: Product: syz [ 724.878993][ T936] usb 4-1: Manufacturer: syz [ 724.883597][ T936] usb 4-1: SerialNumber: syz [ 724.889935][ T936] usb 4-1: config 0 descriptor?? [ 725.078052][T11819] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 725.135586][T11819] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 725.184076][T11819] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 725.220255][T11819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.258301][T14591] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 725.280739][T11819] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.307869][T14041] bridge_slave_1: left allmulticast mode [ 725.327233][T14041] bridge_slave_1: left promiscuous mode [ 725.350033][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.371621][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.461329][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.488641][ T5289] usb 5-1: USB disconnect, device number 104 [ 725.541747][T14041] bridge_slave_0: left allmulticast mode [ 725.552387][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'. [ 725.579792][T14041] bridge_slave_0: left promiscuous mode [ 725.605727][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.514218][T14041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.537272][T14041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.554541][T14041] bond0 (unregistering): Released all slaves [ 726.846738][ T5233] Bluetooth: hci2: command tx timeout [ 727.145053][ T5232] usb 3-1: USB disconnect, device number 98 [ 727.336356][T14041] hsr_slave_0: left promiscuous mode [ 727.391338][T14041] hsr_slave_1: left promiscuous mode [ 727.437246][T14041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.444715][T14041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.467099][T11819] usb 4-1: USB disconnect, device number 100 [ 727.512112][T14041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.536441][T14041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.603819][T14041] veth1_macvtap: left promiscuous mode [ 727.628571][T14041] veth0_macvtap: left promiscuous mode [ 727.628731][T14041] veth1_vlan: left promiscuous mode [ 727.628836][T14041] veth0_vlan: left promiscuous mode [ 728.144573][T14041] team0 (unregistering): Port device team_slave_1 removed [ 728.202910][T14041] team0 (unregistering): Port device team_slave_0 removed [ 728.538189][T14650] kvm: kvm [14649]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000064) [ 728.763662][T14653] kvm: kvm [14652]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000064) [ 728.919931][T14596] chnl_net:caif_netlink_parms(): no params data found [ 728.926915][ T5233] Bluetooth: hci2: command tx timeout [ 728.972382][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1652'. [ 729.079718][ T5289] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 729.177844][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.185027][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.201846][T14596] bridge_slave_0: entered allmulticast mode [ 729.208961][T14596] bridge_slave_0: entered promiscuous mode [ 729.219928][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.227940][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.235511][T14596] bridge_slave_1: entered allmulticast mode [ 729.247312][T14596] bridge_slave_1: entered promiscuous mode [ 729.265961][ T8] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 729.267421][ T5289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.302046][ T5289] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 729.324812][ T5289] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.344236][T14596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.345887][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.377857][ T5289] usb 5-1: config 0 descriptor?? [ 729.378299][T14596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.431589][T14596] team0: Port device team_slave_0 added [ 729.450330][T14596] team0: Port device team_slave_1 added [ 729.459765][ T8] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 729.475975][T11819] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 729.484667][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 729.499152][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.509489][ T8] usb 3-1: config 1 has no interface number 1 [ 729.516458][ T8] usb 3-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 729.538237][ T8] usb 3-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 729.553192][T14596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.566582][ T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.570201][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.593884][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 729.623397][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.631725][ T8] usb 3-1: Product: syz [ 729.637893][ T5232] usb 5-1: USB disconnect, device number 105 [ 729.652452][ T8] usb 3-1: Manufacturer: syz [ 729.657324][ T8] usb 3-1: SerialNumber: syz [ 729.666075][T11819] usb 4-1: Using ep0 maxpacket: 8 [ 729.670910][T14596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.680610][T11819] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 729.692671][T11819] usb 4-1: config 0 has no interface number 0 [ 729.708799][T14596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.711291][T11819] usb 4-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=47.b7 [ 729.718923][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.750882][ C1] vkms_vblank_simulate: vblank timer overrun [ 729.765549][T14596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.776015][T11819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.799055][T11819] usb 4-1: config 0 descriptor?? [ 729.819034][T11819] snd-usb-caiaq 4-1:0.253: can't set alt interface. [ 729.825734][T11819] usb 4-1: unable to init card! (ret=-5) [ 729.836920][T11819] snd-usb-caiaq 4-1:0.253: probe with driver snd-usb-caiaq failed with error -5 [ 729.843567][T14596] hsr_slave_0: entered promiscuous mode [ 729.855248][T14596] hsr_slave_1: entered promiscuous mode [ 729.866533][T14596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.874230][T14596] Cannot create hsr debugfs directory [ 729.895216][T14684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.913542][T14684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.952881][ T8] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 730.009639][ T8] hub 3-1:1.3: bad descriptor, ignoring hub [ 730.022839][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.034878][ T8] hub 3-1:1.3: probe with driver hub failed with error -5 [ 730.052287][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.071529][ T8] usb 3-1: USB disconnect, device number 99 [ 730.088428][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.135261][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.201284][ T5232] usb 4-1: USB disconnect, device number 101 [ 730.885196][T14596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 730.927159][T14596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 730.970786][T14709] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 731.006263][ T5233] Bluetooth: hci2: command tx timeout [ 731.035511][T14596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.107304][T14596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.799251][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.937120][T14596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.027748][T14596] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.189275][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.244951][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.252136][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.294526][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.301703][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.403010][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.414247][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.427651][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.439926][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.454834][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.471134][T14596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 732.496733][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 732.504452][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.506005][ T5232] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 732.607794][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.678910][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.707215][ T5232] usb 5-1: Using ep0 maxpacket: 16 [ 732.754335][ T5232] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 732.768975][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.777171][ T5232] usb 5-1: Product: syz [ 732.781367][ T5232] usb 5-1: Manufacturer: syz [ 732.786076][ T5232] usb 5-1: SerialNumber: syz [ 732.806649][ T5232] r8152-cfgselector 5-1: Unknown version 0x0000 [ 732.813056][ T5232] r8152-cfgselector 5-1: config 0 descriptor?? [ 732.863865][T14596] veth0_vlan: entered promiscuous mode [ 732.902260][T14596] veth1_vlan: entered promiscuous mode [ 732.931143][T14596] veth0_macvtap: entered promiscuous mode [ 732.943267][T14596] veth1_macvtap: entered promiscuous mode [ 732.957837][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.974094][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.984058][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.994733][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.004816][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.016068][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.025969][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.036860][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.049116][T14596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.090092][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.096893][ T5233] Bluetooth: hci2: command tx timeout [ 733.126352][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.160254][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.193994][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.217408][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.237168][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.256054][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.276557][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.297633][T14596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.375188][T14596] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.395625][T14596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.401886][ T46] r8152-cfgselector 5-1: USB disconnect, device number 106 [ 733.426442][T14596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.477008][T14596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.504477][ T12] bridge_slave_1: left allmulticast mode [ 733.515970][ T12] bridge_slave_1: left promiscuous mode [ 733.532070][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.551980][ T12] bridge_slave_0: left allmulticast mode [ 733.574550][ T12] bridge_slave_0: left promiscuous mode [ 733.586141][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.396526][T11819] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 734.556045][T11819] usb 5-1: Using ep0 maxpacket: 8 [ 734.577815][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.589345][T11819] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 734.598218][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.606473][ T5233] Bluetooth: hci1: command tx timeout [ 734.624558][T11819] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.656441][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.656931][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.667572][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.668698][T11819] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 734.696245][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.708499][T11819] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.720387][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.731638][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.733944][ T12] bond0 (unregistering): Released all slaves [ 734.744403][T11819] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 734.757384][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 734.768718][T11819] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.780477][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 734.798928][T11819] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.829758][T11819] usb 5-1: string descriptor 0 read error: -22 [ 734.856908][T11819] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 734.866183][T11819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.884123][T11819] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 735.340764][T14041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.346922][T14730] chnl_net:caif_netlink_parms(): no params data found [ 735.349514][T14041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.373845][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.383498][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.412153][T14753] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1665'. [ 735.451740][T14041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.474474][ T12] hsr_slave_0: left promiscuous mode [ 735.480333][T14041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.491516][ T12] hsr_slave_1: left promiscuous mode [ 735.503732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.511833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.534126][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.559175][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.612643][ T12] veth1_macvtap: left promiscuous mode [ 735.628544][ T12] veth0_macvtap: left promiscuous mode [ 735.639762][ T12] veth1_vlan: left promiscuous mode [ 735.661797][ T12] veth0_vlan: left promiscuous mode [ 736.179329][ T5289] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 736.327560][ T5289] usb 4-1: device descriptor read/64, error -71 [ 736.600358][ T5289] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 736.686067][ T5233] Bluetooth: hci1: command tx timeout [ 736.736385][ T12] team0 (unregistering): Port device team_slave_1 removed [ 736.746240][ T5289] usb 4-1: device descriptor read/64, error -71 [ 736.798630][ T12] team0 (unregistering): Port device team_slave_0 removed [ 736.870352][ T5289] usb usb4-port1: attempt power cycle [ 737.184249][ T936] usb 5-1: USB disconnect, device number 107 [ 737.226579][ T5289] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 737.270467][ T5289] usb 4-1: device descriptor read/8, error -71 [ 737.516366][ T5289] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 737.545386][T14778] kvm: kvm [14777]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000064) [ 737.594328][ T5289] usb 4-1: device descriptor read/8, error -71 [ 737.622503][T14782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1668'. [ 737.682288][T14730] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.693603][T14730] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.702420][T14730] bridge_slave_0: entered allmulticast mode [ 737.716396][ T5289] usb usb4-port1: unable to enumerate USB device [ 737.724913][T14730] bridge_slave_0: entered promiscuous mode [ 737.741894][T14730] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.749236][T14730] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.765149][T14730] bridge_slave_1: entered allmulticast mode [ 737.822232][T14730] bridge_slave_1: entered promiscuous mode [ 737.895934][ T46] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 737.920621][T14730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.953217][T14730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.056667][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 738.065785][T14730] team0: Port device team_slave_0 added [ 738.084889][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 738.109419][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 738.120905][T14730] team0: Port device team_slave_1 added [ 738.127104][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.135132][ T46] usb 5-1: Product: syz [ 738.140739][ T46] usb 5-1: Manufacturer: syz [ 738.153824][ T46] usb 5-1: SerialNumber: syz [ 738.161116][ T46] usb 5-1: config 0 descriptor?? [ 738.173587][ T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 738.192520][T14730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.200160][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.226885][T14730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.251505][T14730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.261972][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.290309][T14730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.342265][T14730] hsr_slave_0: entered promiscuous mode [ 738.349050][T14730] hsr_slave_1: entered promiscuous mode [ 738.355369][T14730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.364250][T14730] Cannot create hsr debugfs directory [ 738.766791][ T5233] Bluetooth: hci1: command tx timeout [ 738.988560][ T936] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 739.005964][ T46] gspca_zc3xx: reg_w_i err -71 [ 739.064113][T14730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 739.081259][T14730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 739.083846][T14730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 739.087439][T14730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 739.166827][ T936] usb 1-1: Using ep0 maxpacket: 32 [ 739.185274][ T936] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.225271][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 739.271020][T14730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.279600][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 739.303606][ T936] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 739.324030][T14730] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.333675][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.345793][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.352986][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.372058][ T936] usb 1-1: config 0 descriptor?? [ 739.378736][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.385930][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.404336][T14815] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 739.435794][ T29] kauditd_printk_skb: 704 callbacks suppressed [ 739.450145][ T936] hub 1-1:0.0: USB hub found [ 739.461163][ T29] audit: type=1326 audit(1729473633.495:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.490911][ T29] audit: type=1326 audit(1729473633.505:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.512380][T14837] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 739.513248][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.517030][ T29] audit: type=1326 audit(1729473633.505:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.616479][ T46] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 739.629619][ T46] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 739.634119][ T29] audit: type=1326 audit(1729473633.505:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.659845][T14730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.660794][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.707342][ T46] usb 5-1: USB disconnect, device number 108 [ 739.724311][T14730] veth0_vlan: entered promiscuous mode [ 739.735463][T14730] veth1_vlan: entered promiscuous mode [ 739.759212][T14730] veth0_macvtap: entered promiscuous mode [ 739.770631][ T29] audit: type=1326 audit(1729473633.505:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.793007][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.793636][ T936] hub 1-1:0.0: 2 ports detected [ 739.837901][T14730] veth1_macvtap: entered promiscuous mode [ 739.891536][ T29] audit: type=1326 audit(1729473633.505:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.918923][ T29] audit: type=1326 audit(1729473633.505:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.943360][T14815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.954616][ T29] audit: type=1326 audit(1729473633.505:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 739.978150][T14815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.005583][ T29] audit: type=1326 audit(1729473633.505:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 740.057255][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.079847][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.090132][ T29] audit: type=1326 audit(1729473633.595:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14836 comm="syz.3.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986ff7dff9 code=0x7ffc0000 [ 740.135912][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.226813][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.256043][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.286118][ T46] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 740.326072][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.356929][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.395901][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.419005][T14730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.498968][ T46] usb 5-1: config index 0 descriptor too short (expected 48285, got 77) [ 740.508607][ T46] usb 5-1: config 66 has too many interfaces: 207, using maximum allowed: 32 [ 740.566690][ T46] usb 5-1: config 66 has an invalid descriptor of length 170, skipping remainder of the config [ 740.591973][ T46] usb 5-1: config 66 has 0 interfaces, different from the descriptor's value: 207 [ 740.608991][ T46] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=ff.ff [ 740.626603][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.644952][ T46] usb 5-1: Product: syz [ 740.649644][ T46] usb 5-1: Manufacturer: syz [ 740.655972][ T46] usb 5-1: SerialNumber: syz [ 740.846669][ T5233] Bluetooth: hci1: command tx timeout [ 740.861709][ T1119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.961508][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.013687][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.017018][ T936] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 741.053009][ T936] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 741.089868][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.096602][ T936] usbhid 1-1:0.0: can't add hid device: -32 [ 741.133003][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.163136][ T936] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 741.173024][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.237579][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.303939][T14730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.346135][T14730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.415324][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 741.426197][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 741.434994][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 741.459038][T14730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.468981][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 741.481827][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 741.490089][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 741.674965][ T1119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.835474][T14730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.905593][T14730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.008688][T14730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.031729][T14730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.197223][ T1119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.267551][T11168] usb 1-1: USB disconnect, device number 96 [ 742.352762][ T1119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.589872][ T5468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.617363][ T5468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.773377][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.795330][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.816631][ T1119] bridge_slave_0: left allmulticast mode [ 742.822362][ T1119] bridge_slave_0: left promiscuous mode [ 742.831338][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.295955][ T7632] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 743.416701][ T46] usb 5-1: USB disconnect, device number 109 [ 743.500728][ T7632] usb 1-1: config 252 has an invalid interface number: 254 but max is 0 [ 743.518573][ T7632] usb 1-1: config 252 has no interface number 0 [ 743.524911][ T7632] usb 1-1: config 252 interface 254 has no altsetting 0 [ 743.534198][ T7632] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 743.553573][ T7632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.561783][ T7632] usb 1-1: Product: syz [ 743.576277][ T5229] Bluetooth: hci0: command tx timeout [ 743.582632][ T7632] usb 1-1: Manufacturer: syz [ 743.587454][ T7632] usb 1-1: SerialNumber: syz [ 743.592539][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.596932][ T7632] bfusb 1-1:252.254: probe with driver bfusb failed with error -5 [ 743.623471][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.635389][ T1119] bond0 (unregistering): Released all slaves [ 743.692303][T14873] chnl_net:caif_netlink_parms(): no params data found [ 743.838739][T14895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.872242][T14895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.987613][T14895] vlan2: entered promiscuous mode [ 744.003424][T14895] caif0: entered promiscuous mode [ 744.012564][T14895] vlan2: entered allmulticast mode [ 744.028469][T14895] caif0: entered allmulticast mode [ 744.042907][T14895] caif0: left allmulticast mode [ 744.055934][T14895] caif0: left promiscuous mode [ 744.140974][ T5280] usb 1-1: USB disconnect, device number 97 [ 744.239948][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.248615][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.256455][T14873] bridge_slave_0: entered allmulticast mode [ 744.264362][T14873] bridge_slave_0: entered promiscuous mode [ 744.273728][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.281875][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.292142][T14873] bridge_slave_1: entered allmulticast mode [ 744.304539][T14873] bridge_slave_1: entered promiscuous mode [ 744.319432][T14928] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 744.554310][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.595118][ T1119] hsr_slave_0: left promiscuous mode [ 744.604129][ T1119] hsr_slave_1: left promiscuous mode [ 744.612953][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.623290][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.641226][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.650015][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.701562][ T1119] veth1_macvtap: left promiscuous mode [ 744.716806][ T1119] veth0_macvtap: left promiscuous mode [ 744.740199][ T1119] veth1_vlan: left promiscuous mode [ 744.766858][ T1119] veth0_vlan: left promiscuous mode [ 745.308066][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 745.319495][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 745.329923][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 745.381558][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 745.397767][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 745.405058][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 745.649948][ T5233] Bluetooth: hci0: command tx timeout [ 745.977526][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 746.108462][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 746.713799][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.902747][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 746.913162][T14942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1689'. [ 747.052314][T14873] team0: Port device team_slave_0 added [ 747.084169][T14873] team0: Port device team_slave_1 added [ 747.183936][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.207904][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.319124][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.384691][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.397334][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.459995][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.490501][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.503115][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.511271][ T5233] Bluetooth: hci3: command tx timeout [ 747.724009][T14873] hsr_slave_0: entered promiscuous mode [ 747.736214][ T5233] Bluetooth: hci0: command tx timeout [ 747.753491][T14873] hsr_slave_1: entered promiscuous mode [ 747.803159][T14873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.822158][T14873] Cannot create hsr debugfs directory [ 747.844554][T14940] chnl_net:caif_netlink_parms(): no params data found [ 748.280064][ T1119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.634617][ T1119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.683406][T14940] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.690961][T14940] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.705633][T14940] bridge_slave_0: entered allmulticast mode [ 748.712547][T14940] bridge_slave_0: entered promiscuous mode [ 748.787636][T14973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.798774][T14973] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 748.801501][ T1119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.826378][T14940] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.834899][T14973] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 748.843216][T14940] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.850545][T14940] bridge_slave_1: entered allmulticast mode [ 748.857392][T14973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 748.867575][T14940] bridge_slave_1: entered promiscuous mode [ 748.888031][T14973] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 748.910856][T14973] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 748.931653][T14973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 748.954737][T14973] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 748.965489][ T1119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.979306][T14973] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 749.015163][T14973] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 749.043086][T14973] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 749.054116][T14940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.076578][T14973] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 749.106960][T14973] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 749.116446][T14973] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 749.149782][T14973] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 749.160429][T14982] fuse: Unknown parameter '0x0000000000000006' [ 749.204854][T14940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.249209][T14940] team0: Port device team_slave_0 added [ 749.336213][T14940] team0: Port device team_slave_1 added [ 749.391237][T14940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.399105][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.425020][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.432834][T14940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.465035][ T1119] bridge_slave_1: left allmulticast mode [ 749.471240][ T1119] bridge_slave_1: left promiscuous mode [ 749.480755][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.489913][ T1119] bridge_slave_0: left allmulticast mode [ 749.495923][ T1119] bridge_slave_0: left promiscuous mode [ 749.501836][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.942306][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.954474][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.967984][ T1119] bond0 (unregistering): Released all slaves [ 749.982409][T14940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.989922][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.025089][T14940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.332440][T14999] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 750.351571][T14940] hsr_slave_0: entered promiscuous mode [ 750.379981][T14940] hsr_slave_1: entered promiscuous mode [ 750.387522][T14940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.405906][T14940] Cannot create hsr debugfs directory [ 750.574700][ T1119] hsr_slave_0: left promiscuous mode [ 750.612431][ T1119] hsr_slave_1: left promiscuous mode [ 750.632658][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.641817][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.655428][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.663470][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.702577][ T1119] veth1_macvtap: left promiscuous mode [ 750.711406][ T1119] veth0_macvtap: left promiscuous mode [ 750.718102][ T1119] veth1_vlan: left promiscuous mode [ 750.723575][ T1119] veth0_vlan: left promiscuous mode [ 750.766254][ T5233] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.926571][ T5233] Bluetooth: hci2: command 0x0c1a tx timeout [ 751.009227][ T5233] Bluetooth: hci1: command 0x0c1a tx timeout [ 751.086127][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 751.166130][ T5233] Bluetooth: hci3: command 0x040f tx timeout [ 751.446075][ T936] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 751.596039][ T936] usb 1-1: device descriptor read/64, error -71 [ 751.835974][ T936] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 751.887278][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 752.013022][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 752.076089][ T936] usb 1-1: device descriptor read/64, error -71 [ 752.186218][ T936] usb usb1-port1: attempt power cycle [ 752.555587][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.564059][ T936] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 752.573595][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.582017][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.592642][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.610776][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 752.618514][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 752.720257][ T936] usb 1-1: device descriptor read/8, error -71 [ 752.988732][ T936] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 753.008049][ T5229] Bluetooth: hci2: command 0x0c1a tx timeout [ 753.030033][ T936] usb 1-1: device descriptor read/8, error -71 [ 753.086040][ T5229] Bluetooth: hci1: command 0x0c1a tx timeout [ 753.146236][ T936] usb usb1-port1: unable to enumerate USB device [ 753.167167][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 753.194950][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1709'. [ 753.207748][T15033] bridge_slave_1: left promiscuous mode [ 753.215293][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.247197][ T5229] Bluetooth: hci3: command 0x040f tx timeout [ 753.255417][T14873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 753.377100][T14873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 753.452110][T14873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 753.478880][T14873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 754.105537][T15031] chnl_net:caif_netlink_parms(): no params data found [ 754.201919][ T1119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.394743][ T1119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.405431][T11168] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 754.582190][ T1119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.628889][T11168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.669058][T11168] usb 1-1: config 0 has no interfaces? [ 754.686321][ T5229] Bluetooth: hci4: command tx timeout [ 754.712249][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.724566][T15031] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.732283][T15031] bridge_slave_0: entered allmulticast mode [ 754.744036][T15031] bridge_slave_0: entered promiscuous mode [ 754.764856][T11168] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 754.793807][T14873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.806197][T11168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.814366][T11168] usb 1-1: Product: syz [ 754.827143][T11168] usb 1-1: Manufacturer: syz [ 754.831763][T11168] usb 1-1: SerialNumber: syz [ 754.866376][T11168] usb 1-1: config 0 descriptor?? [ 754.945262][ T1119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.971081][T15031] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.996000][T15031] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.003583][T15031] bridge_slave_1: entered allmulticast mode [ 755.013342][T15031] bridge_slave_1: entered promiscuous mode [ 755.086619][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.096536][ T5229] Bluetooth: hci2: command 0x0c1a tx timeout [ 755.112983][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.131114][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 755.167539][ T5229] Bluetooth: hci1: command 0x0c1a tx timeout [ 755.218408][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.246082][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 755.252780][T15031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.282589][T15031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.326038][ T5229] Bluetooth: hci3: command 0x040f tx timeout [ 755.441616][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.448820][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.460680][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.467800][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.478081][T14940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.492915][T15031] team0: Port device team_slave_0 added [ 755.541898][T14940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.579826][T15031] team0: Port device team_slave_1 added [ 755.629959][T14940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.706835][T14940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.850673][T14873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.911308][T15031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.942979][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.044008][T15031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.090915][T15031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.099075][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.141009][T15031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.164949][ T1119] bridge_slave_1: left allmulticast mode [ 756.176606][ T1119] bridge_slave_1: left promiscuous mode [ 756.182436][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.197600][ T1119] bridge_slave_0: left allmulticast mode [ 756.204313][ T1119] bridge_slave_0: left promiscuous mode [ 756.217100][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.766082][ T5229] Bluetooth: hci4: command tx timeout [ 756.923611][T15113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1716'. [ 756.936721][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.950723][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.979239][ T1119] bond0 (unregistering): Released all slaves [ 757.203050][ T7632] usb 1-1: USB disconnect, device number 102 [ 757.212111][T15031] hsr_slave_0: entered promiscuous mode [ 757.225106][T15031] hsr_slave_1: entered promiscuous mode [ 757.257461][T15031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.265236][T15031] Cannot create hsr debugfs directory [ 757.352274][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.405963][ T5229] Bluetooth: hci3: command 0x040f tx timeout [ 757.565301][ T1119] hsr_slave_0: left promiscuous mode [ 757.576744][ T1119] hsr_slave_1: left promiscuous mode [ 757.587837][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.595400][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.607736][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.621624][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.663888][ T1119] veth1_macvtap: left promiscuous mode [ 757.669954][ T1119] veth0_macvtap: left promiscuous mode [ 757.676578][ T1119] veth1_vlan: left promiscuous mode [ 757.681990][ T1119] veth0_vlan: left promiscuous mode [ 758.479732][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 758.597258][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 758.849918][ T5229] Bluetooth: hci4: command tx timeout [ 759.200458][T14940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.213945][T14873] veth0_vlan: entered promiscuous mode [ 759.271519][T14873] veth1_vlan: entered promiscuous mode [ 759.355048][T14940] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.493043][ T7178] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.500267][ T7178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.513156][ T5229] Bluetooth: hci3: command 0x040f tx timeout [ 759.543860][T14940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 759.556747][T14940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.697921][ T7178] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.705008][ T7178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.849943][ T7632] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 759.876196][T14873] veth0_macvtap: entered promiscuous mode [ 759.885347][T14873] veth1_macvtap: entered promiscuous mode [ 759.903696][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.918178][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.929806][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.945626][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.970485][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.012093][ T7632] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.034591][ T7632] usb 1-1: config 0 has no interfaces? [ 760.041142][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.053637][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.065798][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 760.069676][ T7632] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 760.099978][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.115899][ T7632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.136804][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.158445][T14940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.165763][ T7632] usb 1-1: Product: syz [ 760.180773][ T7632] usb 1-1: Manufacturer: syz [ 760.188081][ T7632] usb 1-1: SerialNumber: syz [ 760.213843][ T7632] usb 1-1: config 0 descriptor?? [ 760.230393][T14873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.258883][T14873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.277931][T14873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.292592][T14873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.406800][T14940] veth0_vlan: entered promiscuous mode [ 760.419354][T14940] veth1_vlan: entered promiscuous mode [ 760.502100][T14940] veth0_macvtap: entered promiscuous mode [ 760.585169][T14940] veth1_macvtap: entered promiscuous mode [ 760.792217][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.812723][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.825794][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.841310][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.864935][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.894179][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.912691][T14940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.927737][ T5229] Bluetooth: hci4: command tx timeout [ 760.935250][T15031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 760.943467][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.960529][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.992985][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.008726][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.030368][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.046387][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.076397][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.111509][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.173042][T14940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.221516][T15031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 761.248096][T15031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 761.307855][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.309806][T14940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.330730][T14940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.340479][T14940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.351773][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.359851][T14940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.381564][T15031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 761.496225][T15168] netlink: 'syz.2.1724': attribute type 21 has an invalid length. [ 761.513851][T15168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1724'. [ 761.534482][T15168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 761.704764][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.725258][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.735954][ T7632] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 761.796557][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.816046][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.844195][T15031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.888031][ T7632] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 761.898447][ T7632] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.922288][T15031] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.942033][ T7632] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 761.963917][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.971025][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.009540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.016681][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.036231][ T5289] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 762.066737][T15031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 762.085111][T15031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.120739][ T7632] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.164708][ T7632] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 762.207742][ T7632] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 762.209452][T15031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.262549][T15031] veth0_vlan: entered promiscuous mode [ 762.275160][T15031] veth1_vlan: entered promiscuous mode [ 762.311776][T15031] veth0_macvtap: entered promiscuous mode [ 762.330999][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.333291][T15031] veth1_macvtap: entered promiscuous mode [ 762.347780][ T7632] usb 4-1: Product: syz [ 762.351975][ T7632] usb 4-1: Manufacturer: syz [ 762.373059][ T5289] usb 3-1: config 0 has no interfaces? [ 762.385680][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.411138][ T7632] cdc_wdm 4-1:1.0: skipping garbage [ 762.421283][ T5289] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 762.431064][ T7632] cdc_wdm 4-1:1.0: skipping garbage [ 762.442210][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.454836][ T7632] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 762.469419][ T7632] cdc_wdm 4-1:1.0: Unknown control protocol [ 762.480628][ T5289] usb 3-1: Product: syz [ 762.486651][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.516629][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.533690][ T5289] usb 3-1: Manufacturer: syz [ 762.545561][ T5289] usb 3-1: SerialNumber: syz [ 762.553211][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.584562][ T5289] usb 3-1: config 0 descriptor?? [ 762.584786][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.633898][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.664835][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.705985][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.732702][T15031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.798520][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.824408][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.854663][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.875587][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.887223][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 762.888329][ T5232] usb 4-1: USB disconnect, device number 106 [ 762.893846][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 762.900067][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.905944][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 763.001636][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.013543][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.027202][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.039485][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.051568][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.063119][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 763.078631][T15031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.103894][T15031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.118779][T15031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.129470][T15031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.139157][T15031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.226267][ T5289] usb 1-1: USB disconnect, device number 103 [ 763.337894][ T4012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.370669][ T4012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.442640][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.467528][T15185] sit0: entered promiscuous mode [ 763.487419][T15185] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 763.495316][T15185] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1727'. [ 763.510359][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.535592][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.655966][ T7632] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 763.756644][ T5289] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 763.808363][ T7632] usb 1-1: config 252 has an invalid interface number: 254 but max is 0 [ 763.816888][ T7632] usb 1-1: config 252 has no interface number 0 [ 763.834847][ T7632] usb 1-1: config 252 interface 254 has no altsetting 0 [ 763.848704][ T7632] usb 1-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 763.858502][ T7632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.881036][ T7632] usb 1-1: Product: syz [ 763.893663][ T7632] usb 1-1: Manufacturer: syz [ 763.902941][ T7632] usb 1-1: SerialNumber: syz [ 763.911433][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 763.919570][ T5289] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 763.933397][ T5289] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 763.954093][ T7632] bfusb 1-1:252.254: probe with driver bfusb failed with error -5 [ 763.973507][ T5289] usb 5-1: config 135 has no interface number 0 [ 764.002267][ T5289] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 764.031649][ T5289] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 764.070503][ T5289] usb 5-1: config 135 interface 230 has no altsetting 0 [ 764.085665][ T5289] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 764.108164][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.144411][ T5289] usb 5-1: Product: syz [ 764.156160][ T5289] usb 5-1: Manufacturer: syz [ 764.160945][ T5289] usb 5-1: SerialNumber: syz [ 764.171323][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.187470][ T5289] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 764.198136][ T5289] usb 5-1: No valid video chain found. [ 764.245818][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.266000][ T7632] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 764.278386][T15183] vlan2: entered promiscuous mode [ 764.286495][T15183] caif0: entered promiscuous mode [ 764.291671][T15183] vlan2: entered allmulticast mode [ 764.314749][T15183] caif0: entered allmulticast mode [ 764.338207][T15183] caif0: left allmulticast mode [ 764.355138][T15183] caif0: left promiscuous mode [ 764.433467][ T7632] usb 4-1: config index 0 descriptor too short (expected 48285, got 77) [ 764.469860][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.477059][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.491827][ T5280] usb 1-1: USB disconnect, device number 104 [ 764.498292][ T7632] usb 4-1: config 66 has too many interfaces: 207, using maximum allowed: 32 [ 764.498322][ T7632] usb 4-1: config 66 has an invalid descriptor of length 170, skipping remainder of the config [ 764.498343][ T7632] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 207 [ 764.498989][ T5289] usb 5-1: USB disconnect, device number 110 [ 764.554246][ T7632] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=ff.ff [ 764.579035][ T7632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.606373][ T7632] usb 4-1: Product: syz [ 764.611455][ T7632] usb 4-1: Manufacturer: syz [ 764.616556][ T7632] usb 4-1: SerialNumber: syz [ 764.932582][ T5289] usb 3-1: USB disconnect, device number 100 [ 765.176299][T15196] loop0: detected capacity change from 0 to 6 [ 765.184411][T15196] Dev loop0: unable to read RDB block 6 [ 765.191500][T15196] loop0: unable to read partition table [ 765.209754][T15196] loop0: partition table beyond EOD, truncated [ 765.240069][T15196] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 765.240069][T15196] ) failed (rc=-5) [ 765.466093][ T8] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 765.701300][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 765.722479][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 765.735896][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 765.754051][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 765.773374][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.801822][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 765.841593][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.084126][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 766.094939][ T8] usbtmc 1-1:16.0: can't read capabilities [ 766.527874][ T936] usb 1-1: USB disconnect, device number 105 [ 766.867686][T15214] FAULT_INJECTION: forcing a failure. [ 766.867686][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 766.889819][T15214] CPU: 0 UID: 0 PID: 15214 Comm: syz.2.1736 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 766.900638][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 766.910701][T15214] Call Trace: [ 766.914069][T15214] [ 766.917029][T15214] dump_stack_lvl+0x241/0x360 [ 766.921736][T15214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.926965][T15214] ? __pfx__printk+0x10/0x10 [ 766.931583][T15214] ? fs_reclaim_acquire+0x93/0x130 [ 766.936709][T15214] ? __pfx___might_resched+0x10/0x10 [ 766.942114][T15214] should_fail_ex+0x3b0/0x4e0 [ 766.946796][T15214] ? tomoyo_encode+0x26f/0x540 [ 766.951568][T15214] should_failslab+0xac/0x100 [ 766.956283][T15214] ? tomoyo_encode+0x26f/0x540 [ 766.961057][T15214] __kmalloc_noprof+0xd8/0x400 [ 766.966022][T15214] tomoyo_encode+0x26f/0x540 [ 766.970638][T15214] tomoyo_realpath_from_path+0x59e/0x5e0 [ 766.976317][T15214] tomoyo_path_number_perm+0x23a/0x880 [ 766.981783][T15214] ? tomoyo_path_number_perm+0x208/0x880 [ 766.987434][T15214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 766.993487][T15214] ? __fget_files+0x29/0x470 [ 766.998086][T15214] ? __fget_files+0x3f3/0x470 [ 767.002797][T15214] security_file_ioctl+0xc6/0x2a0 [ 767.007849][T15214] __se_sys_ioctl+0x47/0x170 [ 767.012464][T15214] do_syscall_64+0xf3/0x230 [ 767.016980][T15214] ? clear_bhb_loop+0x35/0x90 [ 767.021673][T15214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.027581][T15214] RIP: 0033:0x7fab9797dff9 [ 767.031996][T15214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.051636][T15214] RSP: 002b:00007fab9874c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.060067][T15214] RAX: ffffffffffffffda RBX: 00007fab97b35f80 RCX: 00007fab9797dff9 [ 767.068054][T15214] RDX: 0000000020000200 RSI: 00000000c100565c RDI: 0000000000000003 [ 767.076040][T15214] RBP: 00007fab9874c090 R08: 0000000000000000 R09: 0000000000000000 [ 767.084039][T15214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.092021][T15214] R13: 0000000000000000 R14: 00007fab97b35f80 R15: 00007fab97c5fa28 [ 767.100027][T15214] [ 767.146087][T15214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 767.516139][ T5289] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 767.689067][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 767.716599][ T5289] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 767.743023][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.766773][ T46] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 767.785553][ T5289] usb 3-1: Product: syz [ 767.792396][ T5289] usb 3-1: Manufacturer: syz [ 767.799240][ T5289] usb 3-1: SerialNumber: syz [ 767.813310][ T5289] usb 3-1: config 0 descriptor?? [ 767.820074][ T5289] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 767.952971][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.963758][ T46] usb 5-1: config 0 has no interfaces? [ 767.996466][ T46] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 768.021492][ T5289] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 768.080065][ T7632] usb 4-1: USB disconnect, device number 107 [ 768.103753][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.132677][ T5289] visor 3-1:0.0: probe with driver visor failed with error -32 [ 768.167803][ T46] usb 5-1: Product: syz [ 768.172022][ T46] usb 5-1: Manufacturer: syz [ 768.223598][ T46] usb 5-1: SerialNumber: syz [ 768.231102][ T46] usb 5-1: config 0 descriptor?? [ 768.465963][T15223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.529507][T15223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.540295][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 768.555590][ T46] usb 3-1: USB disconnect, device number 101 [ 768.882894][T15228] kvm: kvm [15227]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000064) [ 769.076945][ T46] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 769.258108][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 769.298547][ T46] usb 3-1: config 13 has an invalid interface number: 244 but max is 1 [ 769.343802][ T46] usb 3-1: config 13 has an invalid interface number: 197 but max is 1 [ 769.366655][ T46] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 769.397639][ T46] usb 3-1: config 13 has no interface number 0 [ 769.415490][ T46] usb 3-1: config 13 has no interface number 1 [ 769.442865][ T46] usb 3-1: config 13 interface 244 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 769.474574][ T46] usb 3-1: config 13 interface 197 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 769.506105][ T46] usb 3-1: config 13 interface 197 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 769.546506][ T5289] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 769.561550][ T46] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 769.599690][ T46] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 769.628418][ T46] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 769.653741][ T46] usb 3-1: config 13 interface 244 has no altsetting 0 [ 769.671097][ T46] usb 3-1: config 13 interface 197 has no altsetting 0 [ 770.208864][ T46] usb 3-1: New USB device found, idVendor=0af0, idProduct=6791, bcdDevice=42.d9 [ 770.217990][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.226578][ T46] usb 3-1: Product: syz [ 770.230954][ T46] usb 3-1: Manufacturer: syz [ 770.251063][ T46] usb 3-1: SerialNumber: syz [ 770.295699][ T5289] usb 4-1: config index 0 descriptor too short (expected 48285, got 77) [ 770.307474][ T5289] usb 4-1: config 66 has too many interfaces: 207, using maximum allowed: 32 [ 770.346247][ T5289] usb 4-1: config 66 has an invalid descriptor of length 170, skipping remainder of the config [ 770.372872][ T5289] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 207 [ 770.414150][ T5289] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=ff.ff [ 770.470018][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.488022][ T46] hso 3-1:13.244: Not our interface [ 770.525345][ T8] usb 5-1: USB disconnect, device number 111 [ 770.535935][ T5289] usb 4-1: Product: syz [ 770.544872][ T5289] usb 4-1: Manufacturer: syz [ 770.552311][ T46] hso 3-1:13.197: Not our interface [ 770.567828][ T5289] usb 4-1: SerialNumber: syz [ 770.604484][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 770.604496][ T29] audit: type=1326 audit(1729473664.665:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 770.652536][ T46] usb 3-1: USB disconnect, device number 102 [ 770.673253][ T29] audit: type=1326 audit(1729473664.665:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 770.702988][ T29] audit: type=1326 audit(1729473664.705:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 770.801597][ T29] audit: type=1326 audit(1729473664.705:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 770.893018][ T29] audit: type=1326 audit(1729473664.705:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 770.976211][ T29] audit: type=1326 audit(1729473664.705:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 771.066133][ T29] audit: type=1326 audit(1729473664.705:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efc7b374fa7 code=0x7ffc0000 [ 771.088679][ T29] audit: type=1326 audit(1729473664.705:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc7b319959 code=0x7ffc0000 [ 771.111143][ T29] audit: type=1326 audit(1729473664.705:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 771.134164][ T29] audit: type=1326 audit(1729473664.705:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15234 comm="syz.4.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7b37dff9 code=0x7ffc0000 [ 772.436442][T15241] fuse: Bad value for 'fd' [ 772.687871][ T5289] usb 4-1: USB disconnect, device number 108 [ 772.826310][T15243] loop0: detected capacity change from 0 to 6 [ 772.853057][T15243] Dev loop0: unable to read RDB block 6 [ 772.873226][T15243] loop0: unable to read partition table [ 772.893582][T15243] loop0: partition table beyond EOD, truncated [ 772.934108][T15243] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 772.934108][T15243] ) failed (rc=-5) [ 774.076188][ T8] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 774.273372][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.325930][ T8] usb 4-1: config 0 has no interfaces? [ 774.336634][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 774.358765][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.371044][T11168] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 774.391526][ T8] usb 4-1: Product: syz [ 774.405903][ T8] usb 4-1: Manufacturer: syz [ 774.410523][ T8] usb 4-1: SerialNumber: syz [ 774.426311][ T8] usb 4-1: config 0 descriptor?? [ 774.546151][T11168] usb 3-1: Using ep0 maxpacket: 8 [ 774.565988][T11168] usb 3-1: config 13 has an invalid interface number: 244 but max is 1 [ 774.594983][T11168] usb 3-1: config 13 has an invalid interface number: 197 but max is 1 [ 774.615223][T11168] usb 3-1: config 13 has no interface number 0 [ 774.639257][T11168] usb 3-1: config 13 has no interface number 1 [ 774.645537][T11168] usb 3-1: config 13 interface 244 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 774.678719][T15264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.716474][T15264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.724794][T11168] usb 3-1: config 13 interface 197 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 774.739370][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 774.783866][T11168] usb 3-1: config 13 interface 197 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 774.816099][T11168] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 774.848599][T11168] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 774.900244][T11168] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 774.936428][T11168] usb 3-1: config 13 interface 244 has no altsetting 0 [ 774.971143][T11168] usb 3-1: config 13 interface 197 has no altsetting 0 [ 775.016759][T11168] usb 3-1: New USB device found, idVendor=0af0, idProduct=6791, bcdDevice=42.d9 [ 775.037119][T11168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.071402][T11168] usb 3-1: Product: syz [ 775.078345][T11168] usb 3-1: Manufacturer: syz [ 775.105957][T11168] usb 3-1: SerialNumber: syz [ 775.507770][T15272] bridge0: port 3(vlan2) entered blocking state [ 775.526303][T15272] bridge0: port 3(vlan2) entered disabled state [ 775.534046][T15272] vlan2: entered allmulticast mode [ 775.547381][T15272] geneve0: entered allmulticast mode [ 775.571696][T15272] vlan2: entered promiscuous mode [ 775.583782][T11168] hso 3-1:13.244: Not our interface [ 775.593316][T15272] geneve0: entered promiscuous mode [ 775.613432][T11168] hso 3-1:13.197: Not our interface [ 775.614447][T15272] bridge0: port 3(vlan2) entered blocking state [ 775.625203][T15272] bridge0: port 3(vlan2) entered forwarding state [ 775.654717][T11168] usb 3-1: USB disconnect, device number 103 [ 776.488856][T11168] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 776.658498][T11168] usb 3-1: Using ep0 maxpacket: 16 [ 776.673697][T11168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.747477][T11168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.772941][T11168] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 776.790295][T11168] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 776.800086][T11168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.829590][T11168] usb 3-1: config 0 descriptor?? [ 777.052232][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 777.321248][T11168] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 777.330846][T11168] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input44 [ 777.447790][T11168] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 777.494770][ T46] usb 4-1: USB disconnect, device number 109 [ 777.547937][ T5289] usb 3-1: USB disconnect, device number 104 [ 777.901817][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.917178][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.928791][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.939516][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.950309][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 777.958620][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 778.180389][ T5468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.320779][ T5468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.440177][ T5468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.515973][ T8] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 778.999225][ T5468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.146684][T15298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.315443][T15284] chnl_net:caif_netlink_parms(): no params data found [ 779.375518][ T8] usb 3-1: config index 0 descriptor too short (expected 48285, got 77) [ 779.387649][ T8] usb 3-1: config 66 has too many interfaces: 207, using maximum allowed: 32 [ 779.403405][ T8] usb 3-1: config 66 has an invalid descriptor of length 170, skipping remainder of the config [ 779.462617][ T8] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 207 [ 779.531541][T15284] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.548079][ T8] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=ff.ff [ 779.562134][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.576089][T15284] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.589159][T15284] bridge_slave_0: entered allmulticast mode [ 779.602072][ T8] usb 3-1: Product: syz [ 779.655538][T15284] bridge_slave_0: entered promiscuous mode [ 779.671176][ T8] usb 3-1: Manufacturer: syz [ 779.685549][T15284] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.701931][ T8] usb 3-1: SerialNumber: syz [ 779.721760][T15284] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.729673][T15284] bridge_slave_1: entered allmulticast mode [ 779.743106][T15284] bridge_slave_1: entered promiscuous mode [ 779.889080][T15284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.896298][ T5289] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 779.978873][T15284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.024793][ T5468] bridge_slave_1: left allmulticast mode [ 780.033916][ T5468] bridge_slave_1: left promiscuous mode [ 780.046121][ T5229] Bluetooth: hci2: command tx timeout [ 780.054611][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.066197][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 780.072866][ T5289] usb 5-1: config 13 has an invalid interface number: 244 but max is 1 [ 780.082131][ T5289] usb 5-1: config 13 has an invalid interface number: 197 but max is 1 [ 780.090860][ T5289] usb 5-1: config 13 has no interface number 0 [ 780.097499][ T5289] usb 5-1: config 13 has no interface number 1 [ 780.098040][ T5468] bridge_slave_0: left allmulticast mode [ 780.103811][ T5289] usb 5-1: config 13 interface 244 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 780.109595][T11168] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 780.121013][ T5289] usb 5-1: config 13 interface 197 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 780.142920][ T5289] usb 5-1: config 13 interface 197 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 780.161208][ T5289] usb 5-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 780.186036][ T5289] usb 5-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 780.206504][ T5468] bridge_slave_0: left promiscuous mode [ 780.218675][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.227984][ T5289] usb 5-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 780.300033][ T5289] usb 5-1: config 13 interface 244 has no altsetting 0 [ 780.344256][ T5289] usb 5-1: config 13 interface 197 has no altsetting 0 [ 780.367814][ T5289] usb 5-1: New USB device found, idVendor=0af0, idProduct=6791, bcdDevice=42.d9 [ 780.384417][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.412378][T11168] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.424292][T11168] usb 4-1: config 0 has no interfaces? [ 780.454156][T11168] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 780.464841][T11168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.493305][T11168] usb 4-1: Product: syz [ 780.498131][ T5289] usb 5-1: Product: syz [ 780.505141][ T5289] usb 5-1: Manufacturer: syz [ 780.523995][ T5289] usb 5-1: SerialNumber: syz [ 780.525032][T11168] usb 4-1: Manufacturer: syz [ 780.542758][T11168] usb 4-1: SerialNumber: syz [ 780.581276][T11168] usb 4-1: config 0 descriptor?? [ 780.835593][ T5289] hso 5-1:13.244: Not our interface [ 780.851379][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.861937][ T5289] hso 5-1:13.197: Not our interface [ 780.885796][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.905415][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 780.915769][ T5289] usb 5-1: USB disconnect, device number 112 [ 781.439633][ T5468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.469996][ T5468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.491237][ T5468] bond0 (unregistering): Released all slaves [ 781.514486][ T8] usb 3-1: USB disconnect, device number 105 [ 781.631902][T15284] team0: Port device team_slave_0 added [ 781.661057][T15284] team0: Port device team_slave_1 added [ 781.832362][T15284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.846293][T15284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.883241][T15284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.923925][T15284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.941264][T15284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.027786][T15284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.056100][ T8] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 782.068397][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 782.096757][T15328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1772'. [ 782.126049][ T5229] Bluetooth: hci2: command tx timeout [ 782.232845][ T8] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 782.253998][ T8] usb 3-1: config 252 has no interface number 0 [ 782.272423][ T8] usb 3-1: config 252 interface 254 has no altsetting 0 [ 782.285460][ T8] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 782.305649][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.337175][T15284] hsr_slave_0: entered promiscuous mode [ 782.345964][ T8] usb 3-1: Product: syz [ 782.350611][ T8] usb 3-1: Manufacturer: syz [ 782.350747][T15284] hsr_slave_1: entered promiscuous mode [ 782.355723][ T8] usb 3-1: SerialNumber: syz [ 782.388880][ T8] bfusb 3-1:252.254: probe with driver bfusb failed with error -5 [ 782.412878][ T5468] hsr_slave_0: left promiscuous mode [ 782.433193][ T5468] hsr_slave_1: left promiscuous mode [ 782.446064][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.454887][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.471412][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.481548][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.510232][ T5468] veth1_macvtap: left promiscuous mode [ 782.516310][ T5468] veth0_macvtap: left promiscuous mode [ 782.522890][ T5468] veth1_vlan: left promiscuous mode [ 782.529015][ T5468] veth0_vlan: left promiscuous mode [ 782.619989][T15320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.638014][T15320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.801744][ T5289] usb 4-1: USB disconnect, device number 110 [ 782.957608][T15345] openvswitch: netlink: Actions may not be safe on all matching packets [ 783.253250][ T5468] team0 (unregistering): Port device team_slave_1 removed [ 783.308754][ T5468] team0 (unregistering): Port device team_slave_0 removed [ 783.860967][T15320] vlan2: entered promiscuous mode [ 783.892502][T15320] caif0: entered promiscuous mode [ 783.900038][T15320] vlan2: entered allmulticast mode [ 783.905426][T15320] caif0: entered allmulticast mode [ 783.923876][T15320] caif0: left allmulticast mode [ 783.932272][T15320] caif0: left promiscuous mode [ 784.058158][ T7632] usb 3-1: USB disconnect, device number 106 [ 784.214537][ T5229] Bluetooth: hci2: command tx timeout [ 785.057498][T15284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 785.099119][T15284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 785.121980][T15284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 785.137292][T15284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 785.146073][ T7632] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 785.255915][T15284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.272746][T15284] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.294012][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.301240][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.337523][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.344833][ T5468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.381200][ T7632] usb 3-1: Using ep0 maxpacket: 8 [ 785.403763][ T7632] usb 3-1: config 13 has an invalid interface number: 244 but max is 1 [ 785.414021][ T7632] usb 3-1: config 13 has an invalid interface number: 197 but max is 1 [ 785.434918][ T7632] usb 3-1: config 13 has no interface number 0 [ 785.455992][ T8] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 785.469345][ T7632] usb 3-1: config 13 has no interface number 1 [ 785.498716][ T7632] usb 3-1: config 13 interface 244 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 785.508871][T15284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 785.536144][ T7632] usb 3-1: config 13 interface 197 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 785.545438][T15284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.568044][ T7632] usb 3-1: config 13 interface 197 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 785.595877][ T7632] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 785.606316][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 785.626193][ T7632] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 785.641737][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 785.651153][ T7632] usb 3-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 785.651186][ T7632] usb 3-1: config 13 interface 244 has no altsetting 0 [ 785.666351][T15284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.697257][ T7632] usb 3-1: config 13 interface 197 has no altsetting 0 [ 785.702561][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.726311][ T7632] usb 3-1: New USB device found, idVendor=0af0, idProduct=6791, bcdDevice=42.d9 [ 785.736308][ T8] usb 5-1: Product: syz [ 785.740513][ T8] usb 5-1: Manufacturer: syz [ 785.744003][ T7632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.776558][ T8] usb 5-1: SerialNumber: syz [ 785.787738][T15284] veth0_vlan: entered promiscuous mode [ 785.793318][ T7632] usb 3-1: Product: syz [ 785.795432][ T8] usb 5-1: config 0 descriptor?? [ 785.812391][ T8] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 785.815896][ T7632] usb 3-1: Manufacturer: syz [ 785.826493][ T7632] usb 3-1: SerialNumber: syz [ 785.845230][T15284] veth1_vlan: entered promiscuous mode [ 785.919690][T15284] veth0_macvtap: entered promiscuous mode [ 785.957832][T15284] veth1_macvtap: entered promiscuous mode [ 786.012868][ T8] usb 5-1: clie_3_5_startup: get config number failed: -32 [ 786.033308][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.054022][ T7632] hso 3-1:13.244: Not our interface [ 786.060617][ T8] visor 5-1:0.0: probe with driver visor failed with error -32 [ 786.069036][ T7632] hso 3-1:13.197: Not our interface [ 786.096055][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.126404][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.126784][ T7632] usb 3-1: USB disconnect, device number 107 [ 786.137184][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.163420][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.184357][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.216310][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.237217][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.267472][T15284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.286177][ T5229] Bluetooth: hci2: command tx timeout [ 786.294535][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.331937][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.351972][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.383086][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.409670][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.444623][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.475607][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.502967][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.559545][T15284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.578925][T11168] usb 5-1: USB disconnect, device number 113 [ 786.649561][T15284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.670120][T15284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.696066][T15284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.719271][T15284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.903860][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.945051][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.973763][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.979052][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.739821][ T5289] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 787.823544][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.635986][ T5280] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 791.836358][ T5280] usb 4-1: Using ep0 maxpacket: 8 [ 791.880949][ T5280] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 791.933527][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.992088][ T5280] usb 4-1: Product: syz [ 792.017526][ T5280] usb 4-1: Manufacturer: syz [ 792.038916][ T5280] usb 4-1: SerialNumber: syz [ 792.082693][ T5280] usb 4-1: config 0 descriptor?? [ 792.116004][ T8] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 792.143858][ T5280] gspca_main: se401-2.14.0 probing 047d:5003 [ 792.283770][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 792.336554][ T8] usb 1-1: config 13 has an invalid interface number: 244 but max is 1 [ 792.438654][ T8] usb 1-1: config 13 has an invalid interface number: 197 but max is 1 [ 792.456341][ T5280] gspca_se401: Wrong descriptor type [ 792.492795][ T8] usb 1-1: config 13 has no interface number 0 [ 792.535979][ T8] usb 1-1: config 13 has no interface number 1 [ 792.553231][ T8] usb 1-1: config 13 interface 244 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 792.611403][ T8] usb 1-1: config 13 interface 197 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 792.672826][ T8] usb 1-1: config 13 interface 197 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 797.234856][ C1] sched: DL replenish lagged too much [ 802.495335][ T8] usb 1-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 802.684622][ T8] usb 1-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 802.740241][ T8] usb 1-1: config 13 interface 197 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 802.782110][ T8] usb 1-1: config 13 interface 244 has no altsetting 0 [ 802.820531][ T8] usb 1-1: config 13 interface 197 has no altsetting 0 [ 803.392295][ T5280] usb 4-1: USB disconnect, device number 111 [ 817.901577][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.936900][ T8] usb 1-1: string descriptor 0 read error: -71 [ 823.062358][ T8] usb 1-1: New USB device found, idVendor=0af0, idProduct=6791, bcdDevice=42.d9 [ 823.103275][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.792156][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 836.815381][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.187297][ T5289] usb 5-1: device descriptor read/all, error -110 [ 849.783395][ T8] usb 1-1: can't set config #13, error -71 [ 860.360397][ T8] usb 1-1: USB disconnect, device number 106 [ 880.637483][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 901.557105][ T5233] Bluetooth: hci4: command 0x0406 tx timeout [ 916.553431][T12486] Bluetooth: hci2: command 0x0406 tx timeout [ 949.394252][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 949.415808][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.611904][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 950.634232][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.516488][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.769610][ T52] kworker/u8:3: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1014.783651][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 1014.794362][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1014.804441][ T52] Workqueue: events_unbound cfg80211_wiphy_work [ 1014.810729][ T52] Call Trace: [ 1014.814023][ T52] [ 1014.816971][ T52] dump_stack_lvl+0x241/0x360 [ 1014.821678][ T52] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1014.826895][ T52] ? __pfx__printk+0x10/0x10 [ 1014.831519][ T52] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1014.837962][ T52] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1014.844490][ T52] warn_alloc+0x278/0x410 [ 1014.848845][ T52] ? __pfx_warn_alloc+0x10/0x10 [ 1014.853734][ T52] __alloc_pages_slowpath+0xf37/0x1020 [ 1014.859230][ T52] ? __pfx___alloc_pages_slowpath+0x10/0x10 [ 1014.865159][ T52] __alloc_pages_noprof+0x493/0x710 [ 1014.870390][ T52] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1014.876154][ T52] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1014.881655][ T52] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1014.887657][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1014.893660][ T52] ? alloc_pages_noprof+0x43/0x170 [ 1014.898802][ T52] alloc_slab_page+0x6a/0x120 [ 1014.903501][ T52] allocate_slab+0x1c0/0x2f0 [ 1014.908111][ T52] ___slab_alloc+0xcd1/0x14b0 [ 1014.912820][ T52] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 1014.918832][ T52] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 1014.924844][ T52] __slab_alloc+0x58/0xa0 [ 1014.929214][ T52] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 1014.935232][ T52] __kmalloc_noprof+0x25a/0x400 [ 1014.940120][ T52] ieee802_11_parse_elems_full+0xdb/0x2880 [ 1014.945962][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1014.952326][ T52] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1014.958248][ T52] ? lockdep_hardirqs_on+0x99/0x150 [ 1014.963474][ T52] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1014.969400][ T52] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1014.975768][ T52] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1014.982122][ T52] ? kvfree_call_rcu+0x48c/0x790 [ 1014.987095][ T52] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 1014.992413][ T52] ? cfg80211_update_known_bss+0xba1/0x1590 [ 1014.998339][ T52] ieee80211_inform_bss+0x15f/0x1080 [ 1015.003650][ T52] ? __cfg80211_bss_update+0x109b/0x2030 [ 1015.009306][ T52] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1015.015058][ T52] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 1015.021492][ T52] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 1015.027937][ T52] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 1015.034383][ T52] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1015.040131][ T52] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 1015.046404][ T52] ? deref_stack_reg+0x17c/0x210 [ 1015.051362][ T52] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1015.058079][ T52] ? ret_from_fork_asm+0x1a/0x30 [ 1015.063045][ T52] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 1015.068879][ T52] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 1015.074562][ T52] ? __pfx_validate_chain+0x10/0x10 [ 1015.079803][ T52] ? __pfx_validate_chain+0x10/0x10 [ 1015.085023][ T52] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1015.091118][ T52] ? mark_lock+0x9a/0x360 [ 1015.095467][ T52] ? __lock_acquire+0x1384/0x2050 [ 1015.100545][ T52] ? __pfx_lock_acquire+0x10/0x10 [ 1015.105595][ T52] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1015.111432][ T52] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 1015.117527][ T52] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1015.123384][ T52] ieee80211_bss_info_update+0x8a7/0xbc0 [ 1015.129076][ T52] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1015.135262][ T52] ? __pfx_lock_release+0x10/0x10 [ 1015.140331][ T52] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 1015.146527][ T52] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 1015.152795][ T52] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1015.159341][ T52] ? mark_lock+0x9a/0x360 [ 1015.163707][ T52] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1015.169716][ T52] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1015.176071][ T52] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1015.181313][ T52] ieee80211_iface_work+0x8a5/0xf20 [ 1015.186548][ T52] cfg80211_wiphy_work+0x2db/0x490 [ 1015.191681][ T52] ? process_scheduled_works+0x976/0x1850 [ 1015.197427][ T52] process_scheduled_works+0xa63/0x1850 [ 1015.203024][ T52] ? __pfx_process_scheduled_works+0x10/0x10 [ 1015.209038][ T52] ? assign_work+0x364/0x3d0 [ 1015.213654][ T52] worker_thread+0x870/0xd30 [ 1015.218281][ T52] ? __kthread_parkme+0x169/0x1d0 [ 1015.223333][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1015.228464][ T52] kthread+0x2f0/0x390 [ 1015.232552][ T52] ? __pfx_worker_thread+0x10/0x10 [ 1015.237683][ T52] ? __pfx_kthread+0x10/0x10 [ 1015.242297][ T52] ret_from_fork+0x4b/0x80 [ 1015.246737][ T52] ? __pfx_kthread+0x10/0x10 [ 1015.251344][ T52] ret_from_fork_asm+0x1a/0x30 [ 1015.256143][ T52] [ 1015.259319][ T52] Mem-Info: [ 1015.262461][ T52] active_anon:13102 inactive_anon:0 isolated_anon:0 [ 1015.262461][ T52] active_file:18051 inactive_file:37870 isolated_file:0 [ 1015.262461][ T52] unevictable:768 dirty:0 writeback:0 [ 1015.262461][ T52] slab_reclaimable:6030 slab_unreclaimable:1424351 [ 1015.262461][ T52] mapped:18720 shmem:9158 pagetables:686 [ 1015.262461][ T52] sec_pagetables:0 bounce:0 [ 1015.262461][ T52] kernel_misc_reclaimable:0 [ 1015.262461][ T52] free:11705 free_pcp:2714 free_cma:0 [ 1015.307454][ T52] Node 0 active_anon:52408kB inactive_anon:0kB active_file:72204kB inactive_file:151408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74880kB dirty:0kB writeback:0kB shmem:35096kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9940kB pagetables:2744kB sec_pagetables:0kB all_unreclaimable? no [ 1015.339811][ T52] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1015.369961][ T52] Node 0 DMA free:9944kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:36kB free_cma:0kB [ 1015.397216][ T52] lowmem_reserve[]: 0 2465 2466 0 0 [ 1015.402501][ T52] Node 0 DMA32 free:11072kB boost:76944kB min:111144kB low:119692kB high:128240kB reserved_highatomic:26624KB active_anon:52748kB inactive_anon:0kB active_file:72204kB inactive_file:150576kB unevictable:1536kB writepending:0kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:9448kB local_pcp:8436kB free_cma:0kB [ 1015.433526][ T52] lowmem_reserve[]: 0 0 0 0 0 [ 1015.438332][ T52] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1015.465234][ T52] lowmem_reserve[]: 0 0 0 0 0 [ 1015.470039][ T52] Node 1 Normal free:25804kB boost:125292kB min:180980kB low:194900kB high:208820kB reserved_highatomic:43008KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1328kB local_pcp:416kB free_cma:0kB [ 1015.500120][ T52] lowmem_reserve[]: 0 0 0 0 0 [ 1015.504880][ T52] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9904kB [ 1015.519119][ T52] Node 0 DMA32: 1470*4kB (MH) 10*8kB (H) 8*16kB (H) 6*32kB (H) 11*64kB (H) 7*128kB (H) 4*256kB (H) 3*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 10440kB [ 1015.534410][ T52] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1015.546009][ T52] Node 1 Normal: 0*4kB 17*8kB (H) 0*16kB 9*32kB (H) 8*64kB (H) 5*128kB (H) 12*256kB (H) 11*512kB (H) 15*1024kB (H) 0*2048kB 0*4096kB = 25640kB [ 1015.560839][ T52] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.570490][ T52] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1015.579838][ T52] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1015.589455][ T52] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1015.598810][ T52] 65079 total pagecache pages [ 1015.603501][ T52] 0 pages in swap cache [ 1015.607709][ T52] Free swap = 124304kB [ 1015.611872][ T52] Total swap = 124996kB [ 1015.616073][ T52] 2097051 pages RAM [ 1015.619886][ T52] 0 pages HighMem/MovableOnly [ 1015.624570][ T52] 427076 pages reserved [ 1015.628801][ T52] 0 pages cma reserved [ 1015.633126][ T52] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.643954][ T52] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.654092][ T52] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.660398][ T52] node 1: slabs: 67628, objs: 1071660, free: 38 [ 1015.668329][ T1119] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.679324][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.679448][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.679471][ C0] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.679489][ C0] node 1: slabs: 67628, objs: 1071660, free: 38 [ 1015.679614][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.679638][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.679656][ C0] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.679672][ C0] node 1: slabs: 67628, objs: 1071660, free: 38 [ 1015.679764][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.679787][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.679808][ C0] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.679826][ C0] node 1: slabs: 67628, objs: 1071660, free: 38 [ 1015.679948][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.679967][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.679985][ C0] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.680003][ C0] node 1: slabs: 67628, objs: 1071660, free: 38 [ 1015.680094][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.680117][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.680137][ C0] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.680155][ C0] node 1: slabs: 67628, objs: 1071660, free: 38 [ 1015.691483][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1015.691625][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1015.691648][ C0] node 0: slabs: 28817, objs: 345804, free: 0 [ 1015.691666][ C0] node 1: slabs: 88406, objs: 1060872, free: 48 [ 1015.702146][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.702174][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.702196][ C0] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.702214][ C0] node 1: slabs: 67630, objs: 1071664, free: 38 [ 1015.702295][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1015.702318][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 1015.702338][ C0] node 0: slabs: 557, objs: 17824, free: 0 [ 1015.702355][ C0] node 1: slabs: 594, objs: 19008, free: 9 [ 1015.952616][ T1119] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 1015.962755][ T1119] node 0: slabs: 21875, objs: 322644, free: 0 [ 1015.969352][ T1119] node 1: slabs: 67635, objs: 1071674, free: 38 [ 1016.026031][ T30] INFO: task kworker/1:2:936 blocked for more than 151 seconds. [ 1016.033725][ T30] Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 1016.086045][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1016.125936][ T30] task:kworker/1:2 state:D stack:18328 pid:936 tgid:936 ppid:2 flags:0x00004000 [ 1016.286113][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 1016.293213][ T30] Call Trace: [ 1016.435967][ T30] [ 1016.438965][ T30] __schedule+0x18af/0x4bd0 [ 1016.443522][ T30] ? __pfx___schedule+0x10/0x10 [ 1016.605957][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1016.612013][ T30] ? __pfx_lock_release+0x10/0x10 [ 1016.796059][ T30] ? kick_pool+0x45c/0x620 [ 1016.800550][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.805777][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1016.926430][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1016.932785][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.116015][ T30] ? schedule+0x90/0x320 [ 1017.121391][ T30] schedule+0x14b/0x320 [ 1017.125596][ T30] schedule_preempt_disabled+0x13/0x30 [ 1017.355979][ T30] __mutex_lock+0x6a7/0xd70 [ 1017.360559][ T30] ? __mutex_lock+0x52a/0xd70 [ 1017.365267][ T30] ? reg_check_chans_work+0x164/0xfd0 [ 1017.675931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1017.681040][ T30] reg_check_chans_work+0x164/0xfd0 [ 1017.846001][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1017.851792][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1018.063586][ T30] ? process_scheduled_works+0x976/0x1850 [ 1018.135943][ T30] process_scheduled_works+0xa63/0x1850 [ 1018.141590][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1018.396024][ T30] ? assign_work+0x364/0x3d0 [ 1018.400689][ T30] worker_thread+0x870/0xd30 [ 1018.405316][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1018.626057][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1018.631168][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1018.826113][ T30] kthread+0x2f0/0x390 [ 1018.830237][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1018.835382][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.125951][ T30] ret_from_fork+0x4b/0x80 [ 1019.130449][ T30] ? __pfx_kthread+0x10/0x10 [ 1019.135069][ T30] ret_from_fork_asm+0x1a/0x30 [ 1019.415963][ T30] [ 1019.419083][ T30] INFO: task kworker/R-ipv6_:2727 blocked for more than 154 seconds. [ 1019.652256][ T30] Not tainted 6.12.0-rc3-syzkaller-00454-gdb87114dcf13 #0 [ 1019.895981][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1019.904701][ T30] task:kworker/R-ipv6_ state:D stack:28816 pid:2727 tgid:2727 ppid:2 flags:0x00004000 [ 1020.376033][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 1020.382362][ T30] Call Trace: [ 1020.385665][ T30] [ 1020.687805][ T30] __schedule+0x18af/0x4bd0 [ 1020.692411][ T30] ? __pfx___schedule+0x10/0x10 [ 1020.916269][ T30] ? __pfx_lock_release+0x10/0x10 [ 1020.921368][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1021.226349][ T30] ? kthread_data+0x52/0xd0 [ 1021.230935][ T30] ? schedule+0x90/0x320 [ 1021.235214][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1021.546047][ T30] ? schedule+0x90/0x320 [ 1021.550367][ T30] schedule+0x14b/0x320 [ 1021.554562][ T30] schedule_preempt_disabled+0x13/0x30 [ 1024.595985][ T30] __mutex_lock+0x6a7/0xd70 [ 1024.600567][ T30] ? __mutex_lock+0x52a/0xd70 [ 1024.605275][ T30] ? addrconf_verify_work+0x19/0x30 [ 1024.805931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1024.811025][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1024.955965][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1024.962369][ T30] ? process_scheduled_works+0x976/0x1850 [ 1025.125910][ T30] addrconf_verify_work+0x19/0x30 [ 1025.131009][ T30] process_scheduled_works+0xa63/0x1850 [ 1025.246083][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1025.252145][ T30] ? assign_work+0x343/0x3d0 [ 1025.355933][ T30] rescuer_thread+0x63f/0x10a0 [ 1025.360763][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1025.465909][ T30] ? rescuer_thread+0x119/0x10a0 [ 1025.470918][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1025.586091][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1025.591200][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1025.695916][ T30] kthread+0x2f0/0x390 [ 1025.700049][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 1025.705273][ T30] ? __pfx_kthread+0x10/0x10 [ 1025.855905][ T30] ret_from_fork+0x4b/0x80 [ 1025.860401][ T30] ? __pfx_kthread+0x10/0x10 [ 1025.865022][ T30] ret_from_fork_asm+0x1a/0x30 [ 1026.015929][ T30]