last executing test programs: 28.317225948s ago: executing program 1 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.507048214s ago: executing program 2 (id=1637): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 12.272284171s ago: executing program 2 (id=1641): socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000500210000000000"], 0x28}}, 0x0) r2 = semget$private(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000000)=[{0x3, 0xf001, 0x1800}, {0x3, 0x1}, {0x4, 0x1ff, 0x800}, {0x0, 0x3}], 0x4) semctl$GETZCNT(r2, 0x0, 0xf, &(0x7f00000000c0)=""/154) semget(0x3, 0x4, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) unshare(0x68020080) 5.817871608s ago: executing program 2 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040)="00fe0000100aff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0xfa, 0xff7ff038}, {0x6, 0x4}]}, 0x10) sendmmsg$unix(r5, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540", 0x3}], 0x1}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x30) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xf5, @rand_addr=' \x01\x00', 0xffffff00}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, 0xffffffffffffff3b) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x44}]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101301) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000100)) getgid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) 5.319204433s ago: executing program 1 (id=1587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.027372443s ago: executing program 0 (id=1665): openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x400000, 0x84, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x3, 0x0, 0x26d, 0x8, 0x100]}, &(0x7f00000003c0)=0x54) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r8, 0x0, r7, 0x0, 0xe4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mount$fuse(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x970061, 0x0) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) 3.805344944s ago: executing program 4 (id=1667): unshare(0x8000400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240), 0x4) 3.766404683s ago: executing program 2 (id=1668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2d2c5f7ff52ba616, &(0x7f00000000c0)=0x5) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000300), 0x4, 0x44c200) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x8000) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x6, 0x1f) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "c42e03373ea9b7bff836bfb1c95c39a59cedb5"}) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb00000000160000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400210000000000000048000200656362286369706865725f6e756c6c2900"/232], 0x154}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = io_uring_setup(0x7dfc, &(0x7f0000000100)) close(r4) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 3.722933139s ago: executing program 3 (id=1669): r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x88, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) 3.658337793s ago: executing program 1 (id=1670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 3.59450452s ago: executing program 4 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 3.532521963s ago: executing program 1 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000280007010000000000000000080000000c0001"], 0x20}}, 0x0) 3.47506815s ago: executing program 1 (id=1673): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x3]}, 0x0, 0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff) keyctl$update(0x2, r3, &(0x7f0000000600)="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", 0x5c9) keyctl$read(0x3, r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500728f9453b100ff1efc777753a451eded405d45862808c03325a1d6dde71512cea5f25cd65c5341d96d2b", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) syz_open_dev$evdev(0x0, 0x549b, 0x200141) prctl$PR_SET_NAME(0x25, &(0x7f0000000000)='/dev/fuse\x00') unshare(0x600) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x9a, 0xc9, 0x3c, 0x10, 0xb05, 0x1786, 0x8d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x61, 0x86, 0xce}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f00000001c0)=0x5) 3.320837934s ago: executing program 0 (id=1674): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89e0, 0x0) 2.572754543s ago: executing program 3 (id=1675): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x2, 0x6}) 2.467682739s ago: executing program 4 (id=1676): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.331752404s ago: executing program 0 (id=1677): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 2.313005002s ago: executing program 3 (id=1678): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000006"], 0x114}], 0x1}, 0x0) 2.220318624s ago: executing program 3 (id=1679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0xc) write(r7, &(0x7f0000000040)="00fe0000100aff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0xfa, 0xff7ff038}, {0x6, 0x4}]}, 0x10) sendmmsg$unix(r5, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540", 0x3}], 0x1}}], 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x30) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0xf5, @rand_addr=' \x01\x00', 0xffffff00}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x24, 0x0, 0xffffffffffffff3b) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x44}]}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101301) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000100)) getgid() lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) 2.207053593s ago: executing program 4 (id=1680): syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000ffff000000000000080045000030000000000067907800000000ffffffff2100907812000228250000000000000000000000e0000002a41414aa"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 1.982038176s ago: executing program 2 (id=1681): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) r1 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open(0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.634677626s ago: executing program 0 (id=1682): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791000000000000061e10000000000009500050113859d000081a02463d881bf8597cd3907dbe255"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) 1.32920094s ago: executing program 0 (id=1683): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0xe) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file1\x00') 1.168848061s ago: executing program 3 (id=1684): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0x7f, 0x40, 0x7, 0x3, 0x0, 0x3ff, 0xc2, 0x40, 0x349, 0xff, 0x101, 0x38, 0x2, 0x5, 0x26, 0xff}, [{0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}], "60ff9e7041780db46b0446a3bcd99c862f7de1294e7a5ef9f3d1eaf757c89f0a2d2725fbfd2cab9610282437effe1f2ad39491491f928d7d2700a00dfb11b07d7bc8e4e599cfa46a8e260446ab5eb182f16315facc455a3e58f34f18024953a7c75eb09e9d8804a3571114c2b5cfb4f471ba76098039f20e706b18417aa22842d0da500710a95e792e52781ecb0c28b34a13cc2d0d663378de1e8f23696b3802b530974cec1274135d6b2741673e0ba029ee9ffc20301daf3c6254c0fc46393e8f395cb081e737e13c17d658a6c4b67a9770"}, 0x14a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x3c0, 0xe8, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'sit0\x00', 'team_slave_1\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@bridge_setlink={0x20, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000240)='^.\'\'--)$#.)-\\\\(*(-{[$:%,\'+!&:\'&&', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='{}:@\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='IDLETIMER\x00', &(0x7f00000007c0)='&\x00'], &(0x7f0000000900)=[&(0x7f0000000840)='team_slave_1\x00', &(0x7f0000000880)='IDLETIMER\x00', &(0x7f00000008c0)='/)\xa7\'%\x00'], 0x400) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x8, 0x0, 0xfe, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 795.378778ms ago: executing program 3 (id=1685): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x3, 0x80000, 0x10001) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000007c0)={0x8, @vbi={0x0, 0x0, 0x0, 0x0, [], [], 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0) 671.235316ms ago: executing program 2 (id=1686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fadvise64(r0, 0x8, 0x4000000, 0x7) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getuid() getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) stat(&(0x7f00000000c0)='./file0/file0/..\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000140)='./file0/file0/..\x00') umount2(&(0x7f0000000180)='./file0/file0/..\x00', 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68060200) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) fsopen(0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) lseek(r2, 0x9, 0x0) 214.166655ms ago: executing program 0 (id=1687): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) r5 = dup2(r3, r3) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24}, 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x28}}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x80, 0x7fffffff, 0x3, 0x4044, r5, 0x1a5f7bab, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xe}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', @random='\a\x00\x00 \x00'}) 157.040536ms ago: executing program 4 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 155.92668ms ago: executing program 1 (id=1689): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) 0s ago: executing program 4 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000340)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r3, &(0x7f00000002c0)=""/40, 0x28, 0x4f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1, 0x0, 0x28}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r6, &(0x7f0000001c80)}, 0x20) close(r5) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x1be}, {0x0}], 0x2}}], 0x2, 0x0) kernel console output (not intermixed with test programs): [ T2976] IPVS: stopping backup sync thread 5580 ... [ 262.834837][ T5227] Bluetooth: hci4: command tx timeout [ 263.406022][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 264.502466][ T2976] hsr_slave_0: left promiscuous mode [ 264.541784][ T2976] hsr_slave_1: left promiscuous mode [ 264.549335][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.558984][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.582992][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.592019][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.647937][ T2976] veth1_macvtap: left promiscuous mode [ 264.656524][ T2976] veth0_macvtap: left promiscuous mode [ 264.669744][ T2976] veth1_vlan: left promiscuous mode [ 264.681989][ T2976] veth0_vlan: left promiscuous mode [ 264.950608][ T5227] Bluetooth: hci4: command tx timeout [ 266.033649][ T5319] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 266.112164][ T2976] team0 (unregistering): Port device team_slave_1 removed [ 266.147967][ T2976] team0 (unregistering): Port device team_slave_0 removed [ 266.248645][ T5319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.264684][ T5319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 266.274143][ T5319] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.290571][ T5319] usb 5-1: New USB device found, idVendor=0525, idProduct=01a1, bcdDevice= 0.a5 [ 266.302662][ T5319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.310753][ T5319] usb 5-1: Product: syz [ 266.315090][ T5319] usb 5-1: Manufacturer: syz [ 266.325000][ T5319] usb 5-1: SerialNumber: syz [ 266.758792][ T5319] usb 5-1: USB disconnect, device number 14 [ 266.829558][ T8237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.858474][ T8237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.868698][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.886537][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.894396][ T8155] bridge_slave_0: entered allmulticast mode [ 266.901928][ T8155] bridge_slave_0: entered promiscuous mode [ 266.913787][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.921085][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.928612][ T8155] bridge_slave_1: entered allmulticast mode [ 266.938771][ T8155] bridge_slave_1: entered promiscuous mode [ 266.986386][ T5227] Bluetooth: hci4: command tx timeout [ 267.027278][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.065756][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.140562][ T8155] team0: Port device team_slave_0 added [ 267.160599][ T8155] team0: Port device team_slave_1 added [ 267.227275][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.240028][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.284450][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.317827][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.334487][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.361756][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.438861][ T8155] hsr_slave_0: entered promiscuous mode [ 267.449848][ T8155] hsr_slave_1: entered promiscuous mode [ 267.460457][ T8155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.468476][ T8155] Cannot create hsr debugfs directory [ 268.810882][ T8278] kcapi: manufacturer command 0 unknown. [ 269.063579][ T5227] Bluetooth: hci4: command tx timeout [ 269.513775][ T8155] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.526687][ T8155] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.547428][ T8155] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.577422][ T8155] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.581553][ T8283] futex_wake_op: syz.1.966 tries to shift op by 32; fix this program [ 269.784747][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.805921][ T5228] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 270.139667][ T8290] binder: 8282:8290 ioctl c0306201 200011c0 returned -14 [ 270.953494][ T5228] usb 4-1: Using ep0 maxpacket: 8 [ 270.965308][ T5228] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 270.982136][ T5228] usb 4-1: config 179 has no interface number 0 [ 270.984326][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.996234][ T5228] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.039304][ T5228] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.052864][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.060040][ T5319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.060083][ T5228] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.091857][ T5228] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.116475][ T5228] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.128497][ T5228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.151643][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.158751][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.188281][ T8276] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.521931][ T5228] usb 4-1: USB disconnect, device number 19 [ 272.527977][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.528024][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.867641][ T8315] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.875320][ T8315] vhci_hcd: invalid port number 10 [ 272.880511][ T8315] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 273.921786][ T8155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.995805][ T8155] veth0_vlan: entered promiscuous mode [ 274.051494][ T8155] veth1_vlan: entered promiscuous mode [ 274.754210][ T8155] veth0_macvtap: entered promiscuous mode [ 274.807363][ T8155] veth1_macvtap: entered promiscuous mode [ 274.871889][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.883176][ T5260] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 274.909316][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.975305][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.980271][ T29] audit: type=1326 audit(1722745756.453:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.3.982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bcff779f9 code=0x0 [ 275.012907][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.036674][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.050824][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.061671][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.075319][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.085689][ T5260] usb 5-1: Using ep0 maxpacket: 16 [ 275.094323][ T5260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.111965][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.134393][ T5260] usb 5-1: New USB device found, idVendor=0572, idProduct=86d6, bcdDevice=2b.de [ 275.156437][ T5260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.166265][ T5260] usb 5-1: Product: syz [ 275.170223][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.173450][ T5260] usb 5-1: Manufacturer: syz [ 275.191422][ T5260] usb 5-1: SerialNumber: syz [ 275.211123][ T5260] usb 5-1: config 0 descriptor?? [ 275.211510][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.219596][ T5260] dvb-usb: found a 'Conexant DMB-TH Stick' in warm state. [ 275.239646][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.243014][ T5260] usb 5-1: setting power ON [ 275.250498][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.268120][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.271506][ T5260] dvb-usb: bulk message failed: -22 (2/0) [ 275.278900][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.305100][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.349530][ T8155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.359443][ T8155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.368863][ T8155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.381127][ T8155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.506109][ T5260] dvb-usb: bulk message failed: -22 (1/0) [ 275.590853][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.632296][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.664991][ T5260] dvb-usb: Conexant DMB-TH Stick error while loading driver (-22) [ 275.688247][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.694209][ T5260] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 275.715165][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.720587][ T5260] usb 5-1: USB disconnect, device number 15 [ 276.049325][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.058158][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.114085][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 276.603667][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 277.046078][ T25] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 277.166290][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.312092][ T25] usb 4-1: Product: syz [ 277.323769][ T25] usb 4-1: Manufacturer: syz [ 277.328403][ T25] usb 4-1: SerialNumber: syz [ 277.338186][ T25] usb 4-1: config 0 descriptor?? [ 277.347027][ T25] gspca_main: pac207-2.14.0 probing 093a:2476 [ 277.454773][ T25] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 277.493723][ T25] usb 4-1: Found UVC 0.00 device syz (093a:2476) [ 277.515383][ T25] usb 4-1: No valid video chain found. [ 279.253155][ T8357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.992'. [ 279.359944][ T1850] usb 4-1: USB disconnect, device number 20 [ 279.473752][ T5260] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.653738][ T5260] usb 3-1: device descriptor read/64, error -71 [ 281.243485][ T5260] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 282.228603][ T8410] binder: 8409:8410 ioctl c018620c 20000100 returned -1 [ 282.248157][ T8414] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 282.320873][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.328641][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.374826][ T8414] bridge0: entered allmulticast mode [ 282.846109][ T8440] tmpfs: Unknown parameter 'nr_ino' [ 282.857335][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 283.786985][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 283.814745][ T8463] pimreg: entered allmulticast mode [ 283.955807][ T8463] pimreg: left allmulticast mode [ 285.155474][ T5260] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 285.363474][ T5260] usb 5-1: Using ep0 maxpacket: 16 [ 285.374185][ T5260] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 285.384907][ T5260] usb 5-1: config 0 has no interface number 0 [ 285.399717][ T5260] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.420083][ T5260] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.433543][ T5260] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 285.444229][ T5260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.487938][ T5260] usb 5-1: config 0 descriptor?? [ 286.822853][ T8516] trusted_key: syz.2.1043 sent an empty control message without MSG_MORE. [ 286.840476][ T5276] usb 5-1: USB disconnect, device number 16 [ 287.163168][ T5260] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 287.413734][ T5260] usb 4-1: Using ep0 maxpacket: 8 [ 287.867751][ T5260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.947608][ T5260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.981363][ T5260] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 287.993512][ T5276] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 288.009681][ T5260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.033873][ T5260] usb 4-1: config 0 descriptor?? [ 288.294366][ T5276] usb 1-1: Using ep0 maxpacket: 8 [ 288.305717][ T5276] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 288.603770][ T5276] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.618861][ T5276] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.628881][ T5276] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.640958][ T5276] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.083527][ T5276] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.090926][ T5260] wacom 0003:056A:0028.0007: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 289.113985][ T5260] wacom 0003:056A:0028.0007: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 289.132847][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.153244][ T5260] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.0007/input/input17 [ 289.243487][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 289.387527][ T5276] usb 1-1: usb_control_msg returned -32 [ 289.401071][ T25] usb 4-1: USB disconnect, device number 21 [ 289.422384][ T5276] usbtmc 1-1:16.0: can't read capabilities [ 289.437732][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.462858][ T8] usb 5-1: config 0 has no interfaces? [ 289.499571][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 289.552443][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.603183][ T8] usb 5-1: config 0 descriptor?? [ 289.884529][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.894197][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.027976][ T8540] trusted_key: encrypted_key: master key parameter '˜g9*pmóŒs-H»8ÇÖEÕ÷¡‚$Žv™¾¾ŠÃ—' is invalid [ 290.158798][ T8540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1053'. [ 290.353741][ T8] usb 5-1: USB disconnect, device number 17 [ 290.957407][ T1850] usb 1-1: USB disconnect, device number 15 [ 291.187128][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0xc2) = 0x1 [ 291.197830][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x186) = 0x1 [ 291.211184][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.223082][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.236578][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.256617][ T8588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.269315][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.278319][ T8588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.290169][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.304351][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.315814][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.327242][ T8579] kvm: kvm [8578]: vcpu0, guest rIP: 0x3b1 Unhandled WRMSR(0x11e) = 0x1 [ 291.867817][ T8597] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 291.923626][ T1850] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 292.143561][ T1850] usb 1-1: Using ep0 maxpacket: 8 [ 292.157189][ T1850] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 292.166167][ T1850] usb 1-1: config 179 has no interface number 0 [ 292.173809][ T1850] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 292.190202][ T1850] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 292.210888][ T1850] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.222607][ T1850] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 292.234186][ T1850] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 292.247567][ T1850] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 292.256667][ T1850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.271947][ T8594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 292.621953][ T1850] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20 [ 293.210379][ T5260] usb 1-1: USB disconnect, device number 16 [ 293.210497][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 293.224887][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 293.327017][ T5260] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 293.377395][ T8598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 293.768386][ T8615] vivid-008: disconnect [ 294.306854][ T8611] vivid-008: reconnect [ 295.846960][ T29] audit: type=1400 audit(1722745777.133:134): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=8629 comm="syz.0.1081" name="14" dev="tmpfs" ino=90 [ 296.053212][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 296.099779][ T8642] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1084'. [ 296.139102][ T8642] gretap0: entered promiscuous mode [ 296.211177][ T8643] nvme_fabrics: missing parameter 'transport=%s' [ 296.241053][ T8642] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1084'. [ 296.307090][ T8643] nvme_fabrics: missing parameter 'nqn=%s' [ 296.320470][ T8642] 0ªX¹¦D: renamed from gretap0 [ 296.357449][ T8646] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 296.365288][ T8642] 0ªX¹¦D: left promiscuous mode [ 296.393592][ T8642] 0ªX¹¦D: entered allmulticast mode [ 296.479073][ T8642] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 297.005987][ T8656] netlink: 'syz.4.1087': attribute type 29 has an invalid length. [ 297.022787][ T8656] netlink: 'syz.4.1087': attribute type 29 has an invalid length. [ 297.093593][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 297.305643][ T8660] netlink: 'syz.3.1089': attribute type 4 has an invalid length. [ 297.317300][ T29] audit: type=1326 audit(1722745778.793:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8661 comm="syz.1.1090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71685779f9 code=0x0 [ 297.319610][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 297.338540][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.432307][ T29] audit: type=1326 audit(1722745778.893:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d81779f9 code=0x0 [ 297.467713][ T5227] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 298.070256][ T8] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 298.075243][ T8668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.079417][ T8] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 298.095078][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 298.105195][ T8] usb 1-1: config 1 has no interface number 0 [ 298.169285][ T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.198242][ T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 298.236424][ T8] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 298.268041][ T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 298.283492][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.307739][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 298.555947][ T8] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 298.568963][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 298.584037][ T8] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 298.649702][ T8679] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 298.649702][ T8679] program syz.3.1094 not setting count and/or reply_len properly [ 299.369087][ T8] usb 1-1: USB disconnect, device number 17 [ 300.358204][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 300.595338][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.612346][ T8] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 300.622817][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.641658][ T8] usb 1-1: config 0 descriptor?? [ 300.766753][ T4615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.778585][ T4615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.788991][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.797703][ T4615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.806806][ T4615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.814715][ T4615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 300.822153][ T4615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.877245][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.680883][ T8] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 302.631802][ T8703] chnl_net:caif_netlink_parms(): no params data found [ 302.809921][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.817750][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.828752][ T8703] bridge_slave_0: entered allmulticast mode [ 302.839495][ T8703] bridge_slave_0: entered promiscuous mode [ 302.848752][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.856574][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.866675][ T8703] bridge_slave_1: entered allmulticast mode [ 302.874051][ T8703] bridge_slave_1: entered promiscuous mode [ 302.903919][ T4615] Bluetooth: hci5: command tx timeout [ 302.929290][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.944848][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.999572][ T8703] team0: Port device team_slave_0 added [ 303.010297][ T8703] team0: Port device team_slave_1 added [ 303.049679][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.057102][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.087358][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.101356][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.108419][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.134820][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.195964][ T8703] hsr_slave_0: entered promiscuous mode [ 303.205910][ T8703] hsr_slave_1: entered promiscuous mode [ 303.218292][ T8703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.260709][ T8703] Cannot create hsr debugfs directory [ 303.280721][ T5260] usb 1-1: USB disconnect, device number 18 [ 303.924840][ T8703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.992105][ T8703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.003522][ T4615] Bluetooth: hci5: command tx timeout [ 305.286780][ T8703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.300316][ T8703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.461161][ T8703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.472842][ T8703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.622549][ T8703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.643002][ T8703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.097050][ T8703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.152659][ T8703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.256548][ T8703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.288008][ T8703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.439377][ T8778] mmap: syz.0.1126 (8778) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 306.488569][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.566122][ T8703] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.585322][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.592473][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.604404][ T8778] libceph: resolve '0.0' (ret=-3): failed [ 306.644199][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.651301][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.063687][ T4615] Bluetooth: hci5: command tx timeout [ 307.868199][ T8792] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 307.994150][ T8792] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.1131'. [ 308.064473][ T8792] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 308.085098][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.113233][ T8792] netlink: 'syz.4.1131': attribute type 2 has an invalid length. [ 308.154257][ T8703] veth0_vlan: entered promiscuous mode [ 308.164018][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 308.199950][ T8703] veth1_vlan: entered promiscuous mode [ 308.232656][ T8703] veth0_macvtap: entered promiscuous mode [ 308.243257][ T9] usb 2-1: USB disconnect, device number 3 [ 308.272032][ T8703] veth1_macvtap: entered promiscuous mode [ 308.380570][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.400804][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.453277][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.465608][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.481525][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.495660][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.589190][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.659588][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.709532][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.756743][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.788552][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.799111][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.802289][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.817555][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.847467][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.856046][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 308.857774][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.873998][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.952530][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.976180][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.987332][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.997248][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.007699][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.019230][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.068628][ T8817] netlink: 'syz.4.1140': attribute type 5 has an invalid length. [ 309.110880][ T8703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.143618][ T4615] Bluetooth: hci5: command tx timeout [ 309.155254][ T8703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.167304][ T8703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.176497][ T8703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.293210][ T3037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.338135][ T3037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.465738][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.487105][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.590527][ T29] audit: type=1326 audit(1722745791.063:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.4.1143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d81779f9 code=0x0 [ 310.166506][ T8812] chnl_net:caif_netlink_parms(): no params data found [ 310.400835][ T8850] netlink: 'syz.0.1149': attribute type 7 has an invalid length. [ 310.429400][ T8850] netlink: 'syz.0.1149': attribute type 5 has an invalid length. [ 310.448560][ T8850] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1149'. [ 310.523019][ T8854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1150'. [ 310.546629][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.563488][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.576817][ T8812] bridge_slave_0: entered allmulticast mode [ 310.593334][ T8812] bridge_slave_0: entered promiscuous mode [ 310.607496][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.614895][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.622995][ T8812] bridge_slave_1: entered allmulticast mode [ 310.631098][ T8812] bridge_slave_1: entered promiscuous mode [ 310.706997][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 310.739978][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.755135][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.881983][ T8812] team0: Port device team_slave_0 added [ 310.882188][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 310.906057][ T8812] team0: Port device team_slave_1 added [ 310.983665][ T4615] Bluetooth: hci6: command tx timeout [ 311.022930][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.051454][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.078502][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.127680][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.147546][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.174549][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.320975][ T8870] binder: 8869:8870 ioctl 40046205 0 returned -22 [ 311.350820][ T8812] hsr_slave_0: entered promiscuous mode [ 311.366821][ T8812] hsr_slave_1: entered promiscuous mode [ 311.385902][ T8812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.432218][ T8812] Cannot create hsr debugfs directory [ 312.157560][ T8812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.311401][ T8812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.474038][ T8812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.587359][ T8812] bond0: (slave netdevsim0): Releasing backup interface [ 312.657848][ T8812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.770333][ T8900] netlink: 'syz.0.1167': attribute type 12 has an invalid length. [ 312.781421][ T8900] netlink: del zone limit has 8 unknown bytes [ 312.983408][ T8812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.002302][ T8812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.058796][ T8812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.070427][ T4615] Bluetooth: hci6: command tx timeout [ 313.144065][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.152001][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.162150][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.170059][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.172109][ T8812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.184572][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.193149][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.201534][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.209465][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.212361][ T8912] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 313.218981][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.250670][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.263654][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.280272][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.296658][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.306282][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.313799][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.321202][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.330529][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.338043][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.345570][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.352980][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.360951][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.368816][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.376880][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.387185][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.395063][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.402849][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.410756][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.418260][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.426250][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.435567][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.443041][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.450474][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.457963][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.466660][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.474164][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.482002][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.490714][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.498631][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.507742][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.521906][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 313.531810][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 313.562374][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.627200][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.648962][ T8920] blktrace: Concurrent blktraces are not allowed on loop3 [ 313.662414][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.669606][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.810386][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.817576][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.008407][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.604857][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.716718][ T8812] veth0_vlan: entered promiscuous mode [ 314.748599][ T8812] veth1_vlan: entered promiscuous mode [ 314.950987][ T8812] veth0_macvtap: entered promiscuous mode [ 314.982637][ T8812] veth1_macvtap: entered promiscuous mode [ 315.145851][ T4615] Bluetooth: hci6: command tx timeout [ 315.184278][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.234248][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.288676][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.353516][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.424211][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.458173][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.500934][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.656612][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.691103][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.626220][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.691259][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.719568][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.735768][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.755511][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.766975][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.781809][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.792344][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.802513][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.813342][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.825060][ T8812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.843892][ T8812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.134750][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.223972][ T4615] Bluetooth: hci6: command tx timeout [ 317.919469][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880639f6400: rx timeout, send abort [ 317.930749][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a08e800: rx timeout, send abort [ 317.939919][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880639f6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.954776][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a08e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 320.518166][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.590070][ T8812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.705699][ T8812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.772045][ T8812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.823507][ T8812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.306978][ T6424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.319346][ T6424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.412278][ T5227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 322.424965][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.439276][ T5227] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 322.452437][ T5227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 322.474626][ T5227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.484579][ T5227] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 322.491949][ T5227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.516818][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.594681][ T5276] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 322.814520][ T5276] usb 3-1: Using ep0 maxpacket: 16 [ 322.844254][ T5276] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.919080][ T5276] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.947402][ T5276] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.973474][ T5276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.996453][ T5276] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 323.011077][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.071336][ T5276] usb 3-1: config 0 descriptor?? [ 323.469695][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 323.689020][ T5276] hid-generic 0003:045E:05DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.2-1/input0 [ 323.948316][ T1850] usb 3-1: USB disconnect, device number 17 [ 324.535813][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 324.664736][ T4615] Bluetooth: hci7: command tx timeout [ 324.761846][ T9012] netlink: 16114 bytes leftover after parsing attributes in process `syz.1.1201'. [ 325.007617][ T9024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1204'. [ 325.027916][ T9024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1204'. [ 325.040894][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.049035][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.057648][ T8978] bridge_slave_0: entered allmulticast mode [ 325.068314][ T8978] bridge_slave_0: entered promiscuous mode [ 325.078661][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.086028][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.096989][ T8978] bridge_slave_1: entered allmulticast mode [ 325.106384][ T8978] bridge_slave_1: entered promiscuous mode [ 325.233886][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.252126][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.946905][ T8978] team0: Port device team_slave_0 added [ 325.963132][ T8978] team0: Port device team_slave_1 added [ 326.123278][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.140952][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.171553][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.288970][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.308046][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.334858][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.645164][ T8978] hsr_slave_0: entered promiscuous mode [ 326.665179][ T8978] hsr_slave_1: entered promiscuous mode [ 326.698264][ T8978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.737186][ T8978] Cannot create hsr debugfs directory [ 326.743883][ T4615] Bluetooth: hci7: command tx timeout [ 328.098322][ T9062] vivid-007: disconnect [ 328.294769][ T5319] vivid-007: reconnect [ 328.501353][ T8978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.333489][ T4615] Bluetooth: hci7: command tx timeout [ 332.344039][ T5227] Bluetooth: hci7: command tx timeout [ 332.596164][ T8978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.857251][ T8978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.863518][ T5260] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 333.064640][ T5260] usb 2-1: Using ep0 maxpacket: 8 [ 333.078495][ T5260] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=74.98 [ 333.089873][ T5260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.099450][ T8978] bond0: (slave netdevsim0): Releasing backup interface [ 333.107921][ T5260] usb 2-1: Product: syz [ 333.112335][ T5260] usb 2-1: Manufacturer: syz [ 333.119453][ T5260] usb 2-1: SerialNumber: syz [ 333.136434][ T5260] usb 2-1: config 0 descriptor?? [ 333.154945][ T8978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.172126][ T5260] pxrc 2-1:0.0: Could not find endpoint [ 333.181221][ T9086] overlayfs: failed to clone lowerpath [ 333.444320][ T5276] usb 2-1: USB disconnect, device number 4 [ 333.743504][ T5260] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 333.838433][ T8978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.975205][ T8978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.986528][ T5260] usb 5-1: Using ep0 maxpacket: 16 [ 334.005249][ T8978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.010964][ T5260] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 334.031668][ T5260] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 334.041162][ T5260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.049241][ T5260] usb 5-1: Product: syz [ 334.050139][ T8978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.060249][ T5260] usb 5-1: Manufacturer: syz [ 334.065445][ T5260] usb 5-1: SerialNumber: syz [ 334.085567][ T9096] ptrace attach of "./syz-executor exec"[8703] was attempted by " [ 334.097061][ T5260] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input22 [ 334.308586][ T4662] bcm5974 5-1:1.0: could not read from device [ 334.364851][ T5260] usb 5-1: USB disconnect, device number 18 [ 334.379829][ T4662] bcm5974 5-1:1.0: could not read from device [ 334.599834][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.693436][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.722252][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.729384][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.803742][ T9108] fuse: Bad value for 'fd' [ 334.828665][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.835778][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.124698][ T9113] 9pnet_fd: Insufficient options for proto=fd [ 335.211125][ T9116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1235'. [ 335.245630][ T9116] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1235'. [ 335.299812][ T5276] kernel read not supported for file /video37 (pid: 5276 comm: kworker/1:5) [ 335.596852][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.736793][ T8978] veth0_vlan: entered promiscuous mode [ 335.779944][ T8978] veth1_vlan: entered promiscuous mode [ 335.856111][ T8978] veth0_macvtap: entered promiscuous mode [ 335.882420][ T8978] veth1_macvtap: entered promiscuous mode [ 335.929340][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.945917][ T5260] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 335.961225][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.117575][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.130324][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.142326][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.157177][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.283616][ T5260] usb 2-1: Using ep0 maxpacket: 32 [ 336.297606][ T5260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 336.309525][ T5260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 336.322392][ T5260] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.692106][ T5260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.719916][ T5260] usb 2-1: config 0 descriptor?? [ 336.733806][ T9132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 336.758836][ T5260] hub 2-1:0.0: USB hub found [ 336.980703][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.996708][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.006998][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.018370][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.028630][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.040769][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.051039][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.063500][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.086799][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.118844][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.161688][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.190616][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.220709][ T5260] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 337.234456][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.623826][ T4615] Bluetooth: hci7: command 0x0405 tx timeout [ 337.922690][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.964382][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.976430][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.988372][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.998978][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.010581][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.080211][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.087288][ T5260] hid-generic 0003:046D:C314.000A: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 338.103075][ T8978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.112209][ T8978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.121787][ T8978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.130567][ T8978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.496915][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.518845][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.540018][ T5227] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 338.607894][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.644028][ T1850] usb 2-1: USB disconnect, device number 5 [ 338.665879][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.301197][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1254'. [ 339.692925][ T9188] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 341.600495][ T5228] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 342.415720][ T5228] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 342.444481][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.515343][ T5228] usb 3-1: config 0 descriptor?? [ 342.916969][ T5260] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 343.305963][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 343.363978][ T5260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.422773][ T5260] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.433128][ T5260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.544730][ T5260] usb 5-1: config 0 descriptor?? [ 343.564531][ T5260] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 343.640935][ T8] usb 4-1: config 252 has an invalid interface number: 181 but max is 0 [ 343.649810][ T8] usb 4-1: config 252 has no interface number 0 [ 343.656659][ T8] usb 4-1: config 252 interface 181 has no altsetting 0 [ 343.665259][ T8] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a84, bcdDevice=65.87 [ 343.674750][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.915149][ T8] usb 4-1: USB disconnect, device number 22 [ 344.073889][ T5228] usb 3-1: Cannot set autoneg [ 344.079157][ T5228] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 344.096271][ T5228] usb 3-1: USB disconnect, device number 18 [ 344.105430][ T4615] Bluetooth: hci8: command 0x1003 tx timeout [ 344.114521][ T5227] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 344.157470][ T9231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.360217][ T9245] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.590562][ T9249] veth0_vlan: entered allmulticast mode [ 344.687972][ T9249] veth0_vlan: left promiscuous mode [ 344.696035][ T9249] veth0_vlan: entered promiscuous mode [ 344.851364][ T5273] kernel write not supported for file /snd/seq (pid: 5273 comm: kworker/0:4) [ 345.931676][ T1850] usb 5-1: USB disconnect, device number 19 [ 346.123190][ T9283] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1294'. [ 347.177883][ T9305] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 347.184261][ T5228] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 347.186097][ T5260] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 347.285401][ T9305] team0: Port device team_slave_1 removed [ 347.296599][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 347.403622][ T5260] usb 4-1: Using ep0 maxpacket: 8 [ 347.413974][ T5260] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 347.437902][ T5260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.456208][ T5260] usb 4-1: Product: syz [ 347.472883][ T5260] usb 4-1: Manufacturer: syz [ 347.491815][ T5260] usb 4-1: SerialNumber: syz [ 347.512350][ T5260] usb 4-1: config 0 descriptor?? [ 347.518127][ T9313] Cannot find del_set index 0 as target [ 347.531981][ T5260] gspca_main: sq930x-2.14.0 probing 2770:930c [ 347.573502][ T5228] usb 3-1: Using ep0 maxpacket: 32 [ 347.594789][ T5228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 348.383587][ T5260] gspca_sq930x: reg_r 001f failed -110 [ 348.410354][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.420309][ T5260] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 349.849744][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.050538][ T5228] usb 3-1: string descriptor 0 read error: -71 [ 350.057504][ T5228] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 350.069042][ T5260] usb 4-1: USB disconnect, device number 23 [ 350.073447][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 350.111526][ T5228] usb 3-1: config 0 descriptor?? [ 350.121874][ T5228] usb 3-1: can't set config #0, error -71 [ 350.135088][ T5228] usb 3-1: USB disconnect, device number 19 [ 350.910469][ T9346] netlink: 'syz.0.1317': attribute type 4 has an invalid length. [ 352.351433][ T9358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.118961][ T9370] wireguard: wireguard0: Could not create IPv6 socket [ 354.153488][ T9370] wireguard0: entered promiscuous mode [ 354.195254][ T9370] wireguard0: entered allmulticast mode [ 354.235912][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 357.605388][ T9413] usb usb8: usbfs: process 9413 (syz.4.1337) did not claim interface 0 before use [ 357.825521][ T9428] tipc: Failed to remove unknown binding: 66,1,1/0:2006234407/2006234409 [ 357.880371][ T9428] tipc: Failed to remove unknown binding: 66,1,1/0:2006234407/2006234409 [ 358.284053][ T9450] tipc: Can't bind to reserved service type 2 [ 358.709596][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'. [ 360.253980][ T9471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1359'. [ 360.328174][ T9479] ubi0: attaching mtd0 [ 360.332769][ T9479] ubi0 error: ubi_attach_mtd_dev: bad VID header (196608) or data offsets (196672) [ 361.492044][ T5305] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 362.294155][ T5305] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 362.316736][ T5305] usb 1-1: config 8 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 116 [ 362.337809][ T9501] netlink: 'syz.4.1365': attribute type 3 has an invalid length. [ 362.353449][ T5305] usb 1-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.373591][ T9501] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1365'. [ 362.405910][ T5305] usb 1-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 362.447081][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.476159][ T5305] usb 1-1: Product: syz [ 362.498911][ T5305] usb 1-1: Manufacturer: syz [ 362.527540][ T5305] usb 1-1: SerialNumber: syz [ 362.555195][ T9486] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.566294][ T5305] ftdi_sio 1-1:8.0: FTDI USB Serial Device converter detected [ 362.658485][ T5305] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 362.801227][ T5305] usb 1-1: USB disconnect, device number 19 [ 362.831101][ T5305] ftdi_sio 1-1:8.0: device disconnected [ 363.337260][ T5260] libceph: connect (1)[c::]:6789 error -101 [ 363.350454][ T5260] libceph: mon0 (1)[c::]:6789 connect error [ 363.423289][ T9528] syzkaller0: entered promiscuous mode [ 363.429829][ T9528] syzkaller0: entered allmulticast mode [ 363.473581][ T5305] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 363.525571][ T9528] syzkaller0: create flow: hash 2197260903 index 1 [ 363.615569][ T5260] libceph: connect (1)[c::]:6789 error -101 [ 363.631848][ T5260] libceph: mon0 (1)[c::]:6789 connect error [ 363.693607][ T5305] usb 3-1: Using ep0 maxpacket: 32 [ 363.720463][ T9521] ceph: No mds server is up or the cluster is laggy [ 363.727930][ T5305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 363.813648][ T5305] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 363.824579][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.833414][ T5305] usb 3-1: Product: syz [ 363.838966][ T5305] usb 3-1: Manufacturer: syz [ 363.852523][ T5305] usb 3-1: SerialNumber: syz [ 363.914468][ T5305] usb 3-1: config 0 descriptor?? [ 363.987912][ T9544] netlink: 'syz.0.1374': attribute type 49 has an invalid length. [ 364.045173][ T9528] syzkaller0: delete flow: hash 2197260903 index 1 [ 369.703516][ T5276] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 369.885762][ T5276] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 369.923599][ T5276] usb 1-1: config 0 has no interfaces? [ 369.936733][ T5276] usb 1-1: string descriptor 0 read error: -22 [ 369.954067][ T5276] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 369.970177][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.993649][ T5276] usb 1-1: config 0 descriptor?? [ 370.674632][ T5273] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 370.900520][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.921310][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.956669][ T5273] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 371.003483][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.073948][ T5273] usb 5-1: config 0 descriptor?? [ 371.561817][ T5273] holtek 0003:1241:5015.000B: collection stack underflow [ 371.589119][ T5273] holtek 0003:1241:5015.000B: item 0 1 0 12 parsing failed [ 372.125353][ T5273] holtek 0003:1241:5015.000B: parse failed [ 372.153720][ T5273] holtek 0003:1241:5015.000B: probe with driver holtek failed with error -22 [ 372.169140][ T5273] usb 5-1: USB disconnect, device number 20 [ 372.907525][ T29] audit: type=1800 audit(1722745854.373:138): pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1386" name="/" dev="fuse" ino=1 res=0 errno=0 [ 373.712812][ T4615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.725000][ T4615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.743063][ T4615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.769181][ T4615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.779674][ T4615] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 373.789748][ T4615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 374.046935][ T4615] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.068806][ T4615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.085868][ T4615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.096250][ T4615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.104368][ T4615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 374.115815][ T4615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.248301][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 374.324340][ T9] usb 1-1: USB disconnect, device number 20 [ 374.733699][ T5276] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 374.769166][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 374.931181][ T5276] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.943563][ T5276] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.954134][ T5276] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.972205][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.985257][ T5276] usb 2-1: SerialNumber: syz [ 375.132072][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.211176][ T5276] usb 2-1: 0:2 : does not exist [ 375.249641][ T5276] usb 2-1: USB disconnect, device number 6 [ 375.348486][ T29] audit: type=1804 audit(1722745856.823:139): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1392" name="/newroot/98/bus/cgroup.controllers" dev="overlay" ino=542 res=1 errno=0 [ 375.467393][ T9729] Unsupported ieee802154 address type: 0 [ 375.482406][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.513380][ T9] usb 3-1: USB disconnect, device number 20 [ 375.538002][ T9735] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 375.668876][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.770894][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.864762][ T4615] Bluetooth: hci8: command tx timeout [ 376.193842][ T4615] Bluetooth: hci7: command tx timeout [ 376.387194][ T5260] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 376.485272][ T11] bridge_slave_1: left allmulticast mode [ 376.490920][ T11] bridge_slave_1: left promiscuous mode [ 376.512142][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.530849][ T11] bridge_slave_0: left allmulticast mode [ 376.550189][ T11] bridge_slave_0: left promiscuous mode [ 376.556511][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.636032][ T5260] usb 5-1: Using ep0 maxpacket: 16 [ 376.645331][ T5260] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 376.678748][ T5260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.688544][ T5260] usb 5-1: Product: syz [ 376.695029][ T5260] usb 5-1: Manufacturer: syz [ 376.711853][ T5260] usb 5-1: SerialNumber: syz [ 376.722088][ T5260] usb 5-1: config 0 descriptor?? [ 376.731174][ T5260] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 377.423267][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.453209][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.468181][ T11] bond0 (unregistering): Released all slaves [ 377.493626][ T11] bond1 (unregistering): Released all slaves [ 377.512981][ T9629] chnl_net:caif_netlink_parms(): no params data found [ 377.591785][ T5260] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 377.613834][ T5260] usb 5-1: USB disconnect, device number 21 [ 377.825619][ T9619] chnl_net:caif_netlink_parms(): no params data found [ 377.943771][ T4615] Bluetooth: hci8: command tx timeout [ 378.263935][ T4615] Bluetooth: hci7: command tx timeout [ 378.471626][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.501239][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.537474][ T9629] bridge_slave_0: entered allmulticast mode [ 378.543858][ T5276] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 378.591021][ T9629] bridge_slave_0: entered promiscuous mode [ 378.768048][ T5276] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 378.772185][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.783431][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.792389][ T5276] usb 5-1: Product: syz [ 378.797499][ T5276] usb 5-1: Manufacturer: syz [ 378.802113][ T5276] usb 5-1: SerialNumber: syz [ 378.808660][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.819817][ T5276] usb 5-1: config 0 descriptor?? [ 378.836427][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.839958][ T9629] bridge_slave_1: entered allmulticast mode [ 378.881449][ T9629] bridge_slave_1: entered promiscuous mode [ 378.976496][ T11] hsr_slave_0: left promiscuous mode [ 378.999838][ T11] hsr_slave_1: left promiscuous mode [ 379.012153][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.022960][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.041289][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.050460][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.090410][ T11] veth1_macvtap: left promiscuous mode [ 379.096709][ T11] veth0_macvtap: left promiscuous mode [ 379.102683][ T11] veth1_vlan: left promiscuous mode [ 379.108434][ T11] veth0_vlan: left promiscuous mode [ 379.246232][ T5276] usb 5-1: f81604_write: reg: 105 data: a8 failed: -EPROTO [ 379.268037][ T5276] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 379.280591][ T5276] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 379.310832][ T5276] usb 5-1: USB disconnect, device number 22 [ 380.024456][ T4615] Bluetooth: hci8: command tx timeout [ 380.151220][ T11] team0 (unregistering): Port device team_slave_1 removed [ 380.368581][ T4615] Bluetooth: hci7: command tx timeout [ 380.387759][T10165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.157300][ T11] team0 (unregistering): Port device team_slave_0 removed [ 381.827017][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.836053][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.843669][ T9619] bridge_slave_0: entered allmulticast mode [ 381.851030][ T9619] bridge_slave_0: entered promiscuous mode [ 381.862682][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.870349][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.877997][ T9619] bridge_slave_1: entered allmulticast mode [ 381.886239][ T9619] bridge_slave_1: entered promiscuous mode [ 382.103623][ T4615] Bluetooth: hci8: command tx timeout [ 382.345908][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.397737][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.431023][ T4615] Bluetooth: hci7: command tx timeout [ 382.470812][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.529993][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.725710][ T9619] team0: Port device team_slave_0 added [ 382.747112][ T9629] team0: Port device team_slave_0 added [ 382.772347][ T9619] team0: Port device team_slave_1 added [ 382.824869][ T9629] team0: Port device team_slave_1 added [ 382.956359][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.963696][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.997124][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.042960][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.050610][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.076631][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.094289][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.103781][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.140851][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.154529][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.161492][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.187935][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.436674][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1423'. [ 383.474245][ T9629] hsr_slave_0: entered promiscuous mode [ 383.492815][ T9629] hsr_slave_1: entered promiscuous mode [ 383.504456][ T9629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.518125][ T9629] Cannot create hsr debugfs directory [ 383.670984][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.719408][T10381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1423'. [ 383.741451][T10386] [U]  [ 384.241110][ T9619] hsr_slave_0: entered promiscuous mode [ 384.957839][ T9619] hsr_slave_1: entered promiscuous mode [ 385.007257][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.043464][ T9619] Cannot create hsr debugfs directory [ 385.132046][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.579851][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.861176][ T5276] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 385.878564][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.908370][T10486] nbd: device at index 4 is going down [ 386.273587][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 386.443688][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 386.577594][ T5276] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 386.643725][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.672956][ T5276] usb 2-1: Product: syz [ 386.708773][ T5276] usb 2-1: Manufacturer: syz [ 386.721453][ T5276] usb 2-1: SerialNumber: syz [ 386.789979][ T5276] usb 2-1: config 0 descriptor?? [ 386.840254][ T5276] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 387.052752][ T5228] usb 2-1: USB disconnect, device number 7 [ 387.098539][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 387.119182][T10590] netlink: 'syz.0.1435': attribute type 25 has an invalid length. [ 387.142337][T10590] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.151523][T10590] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.160601][T10590] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.169849][T10590] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.194337][ T11] bridge_slave_1: left allmulticast mode [ 387.200704][ T11] bridge_slave_1: left promiscuous mode [ 387.207136][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.220953][ T11] bridge_slave_0: left allmulticast mode [ 387.227427][ T11] bridge_slave_0: left promiscuous mode [ 387.233302][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.106096][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.121738][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.178451][ T11] bond0 (unregistering): Released all slaves [ 388.213020][T10622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.416252][ T29] audit: type=1800 audit(1722745869.893:140): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1445" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 388.533655][T10642] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1444'. [ 388.555260][ T5276] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 388.773529][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 388.787584][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 388.813700][ T5276] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 388.826641][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.866682][ T5276] usb 5-1: Product: syz [ 388.871805][ T5276] usb 5-1: Manufacturer: syz [ 388.888374][ T5276] usb 5-1: SerialNumber: syz [ 388.899026][ T5276] usb 5-1: config 0 descriptor?? [ 388.930600][ T5276] hub 5-1:0.0: bad descriptor, ignoring hub [ 388.937251][ T5276] hub 5-1:0.0: probe with driver hub failed with error -5 [ 388.974530][ T5276] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 389.063193][ T5276] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 389.172200][ T5276] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 389.230064][ T11] hsr_slave_0: left promiscuous mode [ 389.251943][ T11] hsr_slave_1: left promiscuous mode [ 389.258687][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.270750][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.291306][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.304051][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.343275][ T11] veth1_macvtap: left promiscuous mode [ 389.349028][ T11] veth0_macvtap: left promiscuous mode [ 389.355248][ T11] veth1_vlan: left promiscuous mode [ 389.360965][ T11] veth0_vlan: left promiscuous mode [ 389.563847][ T5276] usb 5-1: USB disconnect, device number 23 [ 392.076176][ T11] team0 (unregistering): Port device team_slave_1 removed [ 392.198436][ T11] team0 (unregistering): Port device team_slave_0 removed [ 393.746128][ T9629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 394.404932][ T9629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 394.502390][ T9629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.577906][ T9629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.993582][ T5276] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 395.112153][ T9619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.142286][ T9619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.186565][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 395.204300][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 395.224089][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 395.225949][ T9619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.237054][ T5276] usb 5-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=7d.eb [ 395.249939][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.254526][T10776] netlink: 'syz.0.1471': attribute type 1 has an invalid length. [ 395.258541][ T5276] usb 5-1: Product: syz [ 395.270396][ T5276] usb 5-1: Manufacturer: syz [ 395.275510][ T5276] usb 5-1: SerialNumber: syz [ 395.281940][T10776] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1471'. [ 395.309384][ T5276] usb 5-1: config 0 descriptor?? [ 395.316377][T10776] nbd: couldn't find a device at index 64 [ 395.318668][ T5276] safe_serial 5-1:0.0: safe_serial converter detected [ 395.324591][ T9619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.337203][ T5276] safe_serial 5-1:0.0: probe with driver safe_serial failed with error -22 [ 395.678918][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.752120][ T5319] usb 5-1: USB disconnect, device number 24 [ 395.842782][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.966372][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.973561][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.088658][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.132920][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.140055][ T5319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.295940][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.328398][ T5260] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.335597][ T5260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.438105][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.445587][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.601184][ T9619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.618752][ T9619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.135743][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.866981][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.934273][ T9619] veth0_vlan: entered promiscuous mode [ 398.957977][ T9619] veth1_vlan: entered promiscuous mode [ 399.022839][ T9629] veth0_vlan: entered promiscuous mode [ 399.043841][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 399.057365][ T9629] veth1_vlan: entered promiscuous mode [ 399.099986][ T9619] veth0_macvtap: entered promiscuous mode [ 399.121538][ T9619] veth1_macvtap: entered promiscuous mode [ 399.243975][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.244472][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 399.256139][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.271215][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.291840][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 399.321920][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=db.d0 [ 399.331581][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.350100][ T25] usb 2-1: config 0 descriptor?? [ 399.367711][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.378868][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.391039][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.405376][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.420142][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.431023][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.442107][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.452310][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.463190][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.480510][ T25] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -8 [ 399.506201][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.550376][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.599383][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.636414][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.667383][ T25] usb 2-1: USB disconnect, device number 8 [ 399.679008][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.702723][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.738726][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.764334][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.788568][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.817169][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.124806][ T9629] veth0_macvtap: entered promiscuous mode [ 400.139720][ T9629] veth1_macvtap: entered promiscuous mode [ 400.168823][ T9619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.179584][ T9619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.210622][ T9619] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.221119][ T9619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.297721][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.321672][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.332179][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.344214][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.357638][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.368187][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.378076][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.388548][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.398505][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.409010][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.418897][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.429998][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.439857][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.452684][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.487856][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.523599][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.577550][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.610827][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.627220][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.648038][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.661786][T10885] hub 9-0:1.0: USB hub found [ 400.671006][T10885] hub 9-0:1.0: 8 ports detected [ 400.857746][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 400.866309][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 400.874031][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 400.881668][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 400.912846][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.076866][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.132228][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.284728][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.295306][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.308148][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.308921][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.319992][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802cbd0c00: rx timeout, send abort [ 401.333437][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.338542][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.352282][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.355996][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.366834][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.420597][ T5274] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 401.435620][ T5274] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 401.505455][ T9629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.526790][ T9629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.547211][ T9629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.566821][ T9629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.759058][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.776641][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.833800][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802cbd0c00: abort rx timeout. Force session deactivation [ 401.879576][ T6416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.913994][ T6416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.023199][ T2516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.077171][ T2516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.209925][ T6416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.218830][ T6416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.487919][T10948] sp0: Synchronizing with TNC [ 402.721371][T10962] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1505'. [ 403.194519][T10970] fuse: blksize only supported for fuseblk [ 404.243480][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 404.251196][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 404.304970][ T29] audit: type=1326 audit(1722745885.783:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11003 comm="syz.3.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40aeb779f9 code=0x0 [ 404.453591][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 404.460541][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 404.472769][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 404.504021][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 404.523600][ T8] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 404.538056][ T8] usb 1-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.549525][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.563535][ T8] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 404.575843][ T8] usb 1-1: config 38 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.587930][ T8] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 157, changing to 7 [ 404.599252][ T8] usb 1-1: config 38 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 404.631464][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 404.649523][ T8] usb 1-1: string descriptor 0 read error: -22 [ 404.655991][ T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 404.664766][ T8] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 404.675700][ T9] usb 5-1: Product: syz [ 404.680317][ T9] usb 5-1: Manufacturer: syz [ 404.686349][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.694454][ T9] usb 5-1: SerialNumber: syz [ 404.706636][T10990] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 404.714524][T10988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 404.766244][ T8] usb 1-1: no audio or video endpoints found [ 404.773071][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input25 [ 404.798993][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 405.000104][ T5274] usb 5-1: USB disconnect, device number 25 [ 405.046169][ T8] usb 1-1: USB disconnect, device number 21 [ 405.061593][ T5274] appletouch 5-1:1.0: input: appletouch disconnected [ 405.291606][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 405.636020][ T29] audit: type=1326 audit(1722745887.113:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11049 comm="syz.3.1528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40aeb779f9 code=0x0 [ 405.963484][ T5274] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 406.131268][T11077] ======================================================= [ 406.131268][T11077] WARNING: The mand mount option has been deprecated and [ 406.131268][T11077] and is ignored by this kernel. Remove the mand [ 406.131268][T11077] option from the mount to silence this warning. [ 406.131268][T11077] ======================================================= [ 406.193480][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 406.201469][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.213239][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.223752][ T5274] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.241314][ T5274] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 406.250652][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.261337][ T5274] usb 3-1: Product: syz [ 406.266079][ T5274] usb 3-1: Manufacturer: syz [ 406.271114][ T5274] usb 3-1: SerialNumber: syz [ 406.289430][ T5274] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 406.457504][ T29] audit: type=1326 audit(1722745887.933:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11053 comm="syz.4.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35d81779f9 code=0x7fc00000 [ 406.580746][ T4662] bcm5974 3-1:1.0: could not read from device [ 406.609200][ T4662] bcm5974 3-1:1.0: could not read from device [ 406.618191][ T5274] usb 3-1: USB disconnect, device number 21 [ 406.637186][ T4662] bcm5974 3-1:1.0: could not read from device [ 406.705449][ T5228] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 406.915683][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 406.939748][ T5228] usb 4-1: New USB device found, idVendor=1385, idProduct=5f02, bcdDevice=78.fb [ 406.961462][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.994978][ T5228] usb 4-1: Product: syz [ 407.000259][ T5228] usb 4-1: Manufacturer: syz [ 407.006336][T11118] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 407.006994][ T5228] usb 4-1: SerialNumber: syz [ 407.051812][ T5228] usb 4-1: config 0 descriptor?? [ 407.070255][ T5228] usb 4-1: Could not find all expected endpoints [ 407.345569][ T5228] usb 4-1: USB disconnect, device number 24 [ 407.722334][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1552'. [ 407.736747][T10441] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 407.947556][T10441] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 407.988844][T10441] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 408.003315][T10441] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 408.013024][T10441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.271369][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 409.301048][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 409.317594][ T29] audit: type=1326 audit(1722745890.783:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11178 comm="syz.3.1557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40aeb779f9 code=0x0 [ 409.360950][T11193] usb usb1: usbfs: process 11193 (syz.4.1562) did not claim interface 3 before use [ 409.556486][T10441] usb 3-1: string descriptor 0 read error: -71 [ 409.615276][T10441] usb 3-1: USB disconnect, device number 22 [ 409.689462][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 410.762011][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 412.557795][T10441] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 412.799810][T10441] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 412.872154][T11253] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1575'. [ 413.029593][ T29] audit: type=1326 audit(1722745894.363:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11247 comm="syz.0.1575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x0 [ 413.528033][T10441] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.547404][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 413.579811][T10441] usb 2-1: New USB device found, idVendor=05f3, idProduct=024f, bcdDevice=1b.24 [ 413.589315][T10441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.598475][T10441] usb 2-1: Product: syz [ 413.604008][T10441] usb 2-1: Manufacturer: syz [ 413.608833][T10441] usb 2-1: SerialNumber: syz [ 413.618986][T10441] usb 2-1: config 0 descriptor?? [ 414.367940][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 414.897687][ T8] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 414.940084][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.990965][ T8] usb 5-1: config 0 descriptor?? [ 415.213982][ T25] usb 2-1: USB disconnect, device number 9 [ 415.687724][T11272] SET target dimension over the limit! [ 415.773969][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.016487][ T29] audit: type=1326 audit(1722745897.483:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.072840][ T29] audit: type=1326 audit(1722745897.493:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.098509][ T29] audit: type=1326 audit(1722745897.543:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.120601][ T29] audit: type=1326 audit(1722745897.543:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.129730][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.143264][ T29] audit: type=1326 audit(1722745897.543:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.177615][ T29] audit: type=1326 audit(1722745897.543:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.236011][ T29] audit: type=1326 audit(1722745897.703:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.338564][ T29] audit: type=1326 audit(1722745897.733:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.366336][ T29] audit: type=1326 audit(1722745897.753:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.439512][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.445559][ T29] audit: type=1326 audit(1722745897.753:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11311 comm="syz.0.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 416.465108][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.487800][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.506395][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.516883][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.530244][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 416.538977][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.553432][ T5260] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 416.609169][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.753884][ T5260] usb 4-1: Using ep0 maxpacket: 32 [ 416.781778][ T5260] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 416.806299][ T5260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.815807][ T5260] usb 4-1: Product: syz [ 416.820181][ T8] usb 5-1: Cannot set autoneg [ 416.825265][ T8] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 416.838296][ T5260] usb 4-1: Manufacturer: syz [ 416.842917][ T5260] usb 4-1: SerialNumber: syz [ 416.850893][ T8] usb 5-1: USB disconnect, device number 26 [ 416.860128][ T5260] usb 4-1: config 0 descriptor?? [ 416.877598][ T5260] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 416.922738][ T12] bridge_slave_1: left allmulticast mode [ 416.930428][ T12] bridge_slave_1: left promiscuous mode [ 416.937054][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.954243][ T12] bridge_slave_0: left allmulticast mode [ 416.970772][ T12] bridge_slave_0: left promiscuous mode [ 416.984180][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.908241][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.940647][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.963521][ T12] bond0 (unregistering): Released all slaves [ 417.963694][ T5228] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.166868][ T5228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.192092][ T5228] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.202232][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.230218][ T5228] usb 1-1: Product: syz [ 418.244434][ T5228] usb 1-1: Manufacturer: syz [ 418.268581][ T5228] usb 1-1: SerialNumber: syz [ 418.519636][ T5228] usb 1-1: bad CDC descriptors [ 418.572631][ T5228] usb 1-1: USB disconnect, device number 22 [ 418.583584][ T4615] Bluetooth: hci5: command tx timeout [ 418.663620][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 418.873961][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 418.898928][ T12] hsr_slave_0: left promiscuous mode [ 418.904761][ T25] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=54.47 [ 418.917024][ T12] hsr_slave_1: left promiscuous mode [ 418.923645][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.936871][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.942049][ T25] usb 5-1: Product: syz [ 418.957663][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.960279][ T25] usb 5-1: Manufacturer: syz [ 418.969601][ T25] usb 5-1: SerialNumber: syz [ 418.977975][ T25] usb 5-1: config 0 descriptor?? [ 418.990843][ T25] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 418.991030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.007982][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.043076][ T12] veth1_macvtap: left promiscuous mode [ 419.049078][ T12] veth0_macvtap: left promiscuous mode [ 419.059310][ T12] veth1_vlan: left promiscuous mode [ 419.065282][ T12] veth0_vlan: left promiscuous mode [ 419.151862][ T5260] gspca_stk1135: reg_w 0x2ff err -71 [ 419.171709][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.179956][ T5260] gspca_stk1135: Sensor write failed [ 419.185740][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.192290][ T5260] gspca_stk1135: Sensor write failed [ 419.197719][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.204329][ T5260] gspca_stk1135: Sensor read failed [ 419.209634][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.222740][ T5260] gspca_stk1135: Sensor read failed [ 419.229648][ T5260] gspca_stk1135: Detected sensor type unknown (0x0) [ 419.237391][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.244463][ T5260] gspca_stk1135: Sensor read failed [ 419.249767][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.256377][ T5260] gspca_stk1135: Sensor read failed [ 419.261703][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.269727][ T5260] gspca_stk1135: Sensor write failed [ 419.277773][ T5260] gspca_stk1135: serial bus timeout: status=0x00 [ 419.284777][ T5260] gspca_stk1135: Sensor write failed [ 419.290597][ T5260] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 419.301293][ T5260] usb 4-1: USB disconnect, device number 25 [ 419.338231][ T5274] usb 5-1: USB disconnect, device number 27 [ 420.715742][ T4615] Bluetooth: hci5: command tx timeout [ 422.464876][ T12] team0 (unregistering): Port device team_slave_0 removed [ 422.763356][ T4615] Bluetooth: hci5: command tx timeout [ 423.467657][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 424.174635][T11468] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1603'. [ 424.233811][T11324] chnl_net:caif_netlink_parms(): no params data found [ 425.342596][ T4615] Bluetooth: hci5: command tx timeout [ 425.489973][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.526904][T11324] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.588035][T11324] bridge_slave_0: entered allmulticast mode [ 425.752606][T11324] bridge_slave_0: entered promiscuous mode [ 426.547059][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.563542][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.586056][T11324] bridge_slave_1: entered allmulticast mode [ 426.596331][T11324] bridge_slave_1: entered promiscuous mode [ 427.539513][T11324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.665543][T11324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.856238][T11641] ceph: No mds server is up or the cluster is laggy [ 428.106392][T11324] team0: Port device team_slave_0 added [ 428.127715][T11324] team0: Port device team_slave_1 added [ 428.204558][T10441] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 428.272012][T11324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.280591][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.403575][T11324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.446486][T11324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.463589][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.490777][T10441] usb 4-1: Using ep0 maxpacket: 32 [ 428.497691][T11324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.513790][T10441] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.533535][T10441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 428.567418][T10441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.616063][T10441] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 428.625482][T10441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.646184][T10441] usb 4-1: config 0 descriptor?? [ 428.657077][T11707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 428.668775][T10441] hub 4-1:0.0: USB hub found [ 428.929675][T10441] hub 4-1:0.0: 2 ports detected [ 428.930724][T11324] hsr_slave_0: entered promiscuous mode [ 429.347631][T11324] hsr_slave_1: entered promiscuous mode [ 429.453186][T11324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.655583][T11324] Cannot create hsr debugfs directory [ 430.522795][T11797] IPv6: Can't replace route, no match found [ 431.016126][T10441] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 431.293636][T10441] usb 4-1: device descriptor read/64, error -32 [ 433.273254][T10441] hub 4-1:0.0: set hub depth failed [ 433.289369][ T9] usb 4-1: USB disconnect, device number 26 [ 433.582306][T11324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.267229][T11324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.354690][T11324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.467215][T11324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.830885][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.878050][T11324] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.082031][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.089342][ T5319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.176297][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.183436][ T5319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.234057][T11324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.914302][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.017988][T11990] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1655'. [ 437.027496][T11990] netlink: 'syz.4.1655': attribute type 2 has an invalid length. [ 437.039009][T11990] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 437.043790][T11324] veth0_vlan: entered promiscuous mode [ 437.056072][T11990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1655'. [ 437.063291][T11324] veth1_vlan: entered promiscuous mode [ 437.167436][T11324] veth0_macvtap: entered promiscuous mode [ 437.199967][T11324] veth1_macvtap: entered promiscuous mode [ 437.270910][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.304741][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.320317][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.331339][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.345950][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.357002][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.367424][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.378373][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.390828][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.403137][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.414761][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.425352][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.436129][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.447318][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.459988][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.469365][ T5319] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 437.481357][T12001] netlink: 'syz.4.1658': attribute type 1 has an invalid length. [ 437.502733][T12003] IPv6: Can't replace route, no match found [ 437.529636][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.586099][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.637389][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.669925][ T5319] usb 4-1: Using ep0 maxpacket: 32 [ 437.678802][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.712382][ T5319] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.726253][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.753595][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 437.773561][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.774242][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 437.832819][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.852128][ T5319] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 437.860434][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.861616][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.882285][ T5319] usb 4-1: config 0 descriptor?? [ 437.888277][T11995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.897197][ T5319] hub 4-1:0.0: USB hub found [ 437.915376][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.927179][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.959833][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.010745][T11324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.020521][T11324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.039386][T11324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.049150][T11324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.128155][ T5319] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 438.368412][ T5319] hid-generic 0003:046D:C314.000D: item fetching failed at offset 0/3 [ 438.381251][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.392925][ T5319] hid-generic 0003:046D:C314.000D: probe with driver hid-generic failed with error -22 [ 438.408560][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.424292][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 438.476119][ T3037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.486318][ T3037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.844705][ T5319] usb 4-1: USB disconnect, device number 27 [ 439.040918][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 439.040936][ T29] audit: type=1326 audit(1722745920.513:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 439.084738][ T29] audit: type=1326 audit(1722745920.513:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 439.167582][ T29] audit: type=1326 audit(1722745920.553:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 439.259988][ T29] audit: type=1326 audit(1722745920.563:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 440.220341][ T29] audit: type=1326 audit(1722745920.563:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb10c776390 code=0x7ffc0000 [ 440.269074][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.303094][ T29] audit: type=1326 audit(1722745920.563:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 440.330982][ T29] audit: type=1326 audit(1722745920.563:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 440.372073][ T29] audit: type=1326 audit(1722745920.593:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 440.396319][ T29] audit: type=1326 audit(1722745920.593:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 440.420273][ T29] audit: type=1326 audit(1722745920.593:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.0.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10c7779f9 code=0x7ffc0000 [ 440.511493][T12077] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 440.765022][T12084] siw: device registration error -23 [ 441.359510][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1668'. [ 441.545590][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 441.724340][T12100] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1678'. [ 441.913477][T10560] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 441.930128][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1679'. [ 442.010518][T12108] cgroup: fork rejected by pids controller in /syz3 [ 442.153672][T10560] usb 2-1: Using ep0 maxpacket: 16 [ 442.226991][T10560] usb 2-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=8d.4d [ 442.244997][T10560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.253252][T10560] usb 2-1: Product: syz [ 442.257883][T10560] usb 2-1: Manufacturer: syz [ 442.262494][T10560] usb 2-1: SerialNumber: syz [ 442.276002][T10560] usb 2-1: config 0 descriptor?? [ 442.292401][T10560] r8712u: register rtl8712_netdev_ops to netdev_ops [ 442.300232][T10560] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 442.531888][T10560] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 442.553673][T10560] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 442.561311][T10560] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 442.588992][T10560] usb 2-1: USB disconnect, device number 10 [ 443.907446][T12391] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1685'. [ 444.127508][ T30] INFO: task syz.1.1090:8661 blocked for more than 144 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.261045][ T30] Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 444.370813][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 444.529685][ T30] task:syz.1.1090 state:D stack:24672 pid:8661 tgid:8661 ppid:5223 flags:0x00000004 [ 444.627263][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 444.654158][ T30] Call Trace: [ 444.657479][ T30] [ 444.694443][ T30] __schedule+0x17ae/0x4a10 [ 444.699028][ T30] ? __pfx___schedule+0x10/0x10 [ 444.804661][ T30] ? __pfx_lock_release+0x10/0x10 [ 444.907996][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 444.993466][ T30] ? schedule+0x90/0x320 [ 444.997769][ T30] schedule+0x14b/0x320 [ 445.001943][ T30] schedule_preempt_disabled+0x13/0x30 [ 445.098086][ T30] __mutex_lock+0x6a4/0xd70 [ 445.102663][ T30] ? __mutex_lock+0x527/0xd70 [ 445.110166][ T30] ? vhost_net_stop+0x11e/0x210 [ 445.116113][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 445.122080][ T30] ? vhost_net_buf_unproduce+0xc7/0x770 [ 445.128575][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 445.136854][ T30] vhost_net_stop+0x11e/0x210 [ 445.144359][ T30] vhost_net_release+0x104/0x470 [ 445.150226][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 445.155829][ T30] ? evm_file_release+0x140/0x1d0 [ 445.160849][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 445.175320][ T30] __fput+0x24a/0x8a0 [ 445.193456][ T30] task_work_run+0x24f/0x310 [ 445.198084][ T30] ? __pfx_task_work_run+0x10/0x10 [ 445.203272][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 445.236386][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 445.242417][ T30] do_syscall_64+0x100/0x230 [ 445.253480][ T30] ? clear_bhb_loop+0x35/0x90 [ 445.274930][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.281229][ T30] RIP: 0033:0x7f71685779f9 [ 445.286116][ T30] RSP: 002b:00007ffe24925b78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 445.295909][ T30] RAX: 0000000000000000 RBX: 00007f7168707a80 RCX: 00007f71685779f9 [ 445.308304][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 445.318607][ T30] RBP: 00007f7168707a80 R08: 0000000000000006 R09: 00007ffe24925e5f [ 445.326979][ T30] R10: 00000000005f54a0 R11: 0000000000000246 R12: 0000000000048c7d [ 445.335425][ T30] R13: 00007ffe24925c70 R14: 00007ffe24925c90 R15: ffffffffffffffff [ 445.348174][ T30] [ 445.351272][ T30] INFO: task vhost-8662:8663 blocked for more than 145 seconds. [ 445.406846][ T30] Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 445.425391][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.436132][ T30] task:vhost-8662 state:D stack:23696 pid:8663 tgid:8661 ppid:5223 flags:0x00004004 [ 445.449252][ T30] Call Trace: [ 445.463852][ T30] [ 445.467864][ T30] __schedule+0x17ae/0x4a10 [ 445.473477][ T30] ? __pfx___schedule+0x10/0x10 [ 445.480965][ T30] ? __pfx_lock_release+0x10/0x10 [ 445.487037][ T30] ? schedule+0x90/0x320 [ 445.492347][ T30] schedule+0x14b/0x320 [ 445.502997][ T30] ? down_read+0x6a5/0xa40 [ 445.524447][ T30] schedule_preempt_disabled+0x13/0x30 [ 445.529954][ T30] down_read+0x705/0xa40 [ 445.563391][ T30] ? __lock_acquire+0x137a/0x2040 [ 445.568483][ T30] ? __pfx_down_read+0x10/0x10 [ 445.573276][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 445.595909][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 445.601338][ T30] ? __pfx___up_read+0x10/0x10 [ 445.606268][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 445.611670][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 445.617705][ T30] ? count_memcg_event_mm+0x90/0x420 [ 445.623020][ T30] ? __filemap_get_folio+0x984/0xc10 [ 445.628384][ T30] filemap_fault+0x828/0x1760 [ 445.633503][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 445.639013][ T30] ? handle_pte_fault+0x21e2/0x6eb0 [ 445.644942][ T30] ? __pfx_lock_release+0x10/0x10 [ 445.649994][ T30] ? pte_alloc_one+0x443/0x5d0 [ 445.656217][ T30] __do_fault+0x135/0x460 [ 445.660937][ T30] ? handle_pte_fault+0x21e2/0x6eb0 [ 445.667604][ T30] handle_pte_fault+0x3b24/0x6eb0 [ 445.672672][ T30] ? mark_lock+0x9a/0x350 [ 445.677454][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.686261][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 445.691700][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 445.697662][ T30] handle_mm_fault+0xf70/0x1880 [ 445.702557][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 445.708080][ T30] ? __put_user_nocheck_2+0x7/0x20 [ 445.713214][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 445.718569][ T30] exc_page_fault+0x2b9/0x8c0 [ 445.723274][ T30] asm_exc_page_fault+0x26/0x30 [ 445.728607][ T30] RIP: 0010:__get_user_nocheck_2+0xa/0x20 [ 445.734742][ T30] Code: 01 ca c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 <0f> b7 10 31 c0 0f 01 ca c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 [ 445.754875][ T30] RSP: 0018:ffffc90003ca76e8 EFLAGS: 00050202 [ 445.761331][ T30] RAX: 00000000200002c2 RBX: ffff888054920290 RCX: dffffc0000000000 [ 445.770666][ T30] RDX: ffffc900141b5000 RSI: 00000000000000b9 RDI: 00000000000000ba [ 445.780078][ T30] RBP: ffffc90003ca76f0 R08: ffffffff88fa7f56 R09: 0000000000000000 [ 445.790334][ T30] R10: ffffc90003ca7960 R11: fffff52000794f2e R12: ffff888054920390 [ 445.798787][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880549201e0 [ 445.806832][ T30] ? vhost_get_vq_desc+0x136/0x2740 [ 445.812059][ T30] vhost_get_avail_idx+0xd5/0x410 [ 445.817250][ T30] vhost_get_vq_desc+0x146/0x2740 [ 445.822315][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.828366][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.835179][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 445.841462][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 445.847796][ T30] ? __pfx_vhost_get_vq_desc+0x10/0x10 [ 445.853657][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 445.858881][ T30] ? peek_head_len+0x5c0/0x930 [ 445.865188][ T30] handle_rx+0x825/0x1fe0 [ 445.869598][ T30] ? __pfx_handle_rx+0x10/0x10 [ 445.875671][ T30] ? irqentry_exit+0x63/0x90 [ 445.880284][ T30] ? lockdep_hardirqs_on+0x50/0x150 [ 445.889262][ T30] vhost_run_work_list+0x145/0x1c0 [ 445.894862][ T30] ? __pfx_vhost_run_work_list+0x10/0x10 [ 445.900519][ T30] vhost_task_fn+0x267/0x3f0 [ 445.905311][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 445.910447][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 445.915963][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.922059][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.928882][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 445.934398][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 445.939528][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 445.945280][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 445.950498][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 445.956081][ T30] ret_from_fork+0x4b/0x80 [ 445.960518][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 445.966105][ T30] ret_from_fork_asm+0x1a/0x30 [ 445.971272][ T30] [ 445.992711][ T30] [ 445.992711][ T30] Showing all locks held in the system: [ 446.001549][ T30] 1 lock held by khungtaskd/30: [ 446.018673][ T30] #0: ffffffff8e7377e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 446.031639][ T30] 3 locks held by kworker/u8:16/3037: [ 446.037441][ T30] 2 locks held by getty/4976: [ 446.042124][ T30] #0: ffff88802f8e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 446.052027][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 446.062617][ T30] 2 locks held by kworker/0:3/5260: [ 446.067947][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 446.078993][ T30] #1: ffffc90003db7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 446.089810][ T30] 3 locks held by kworker/0:7/5319: [ 446.098261][ T30] 1 lock held by syz.4.813/7860: [ 446.104781][ T30] 1 lock held by syz.2.1060/8564: [ 446.109818][ T30] 1 lock held by syz.1.1090/8661: [ 446.115299][ T30] #0: ffff888054920258 (&vq->mutex){+.+.}-{3:3}, at: vhost_net_stop+0x11e/0x210 [ 446.124956][ T30] 2 locks held by vhost-8662/8663: [ 446.130077][ T30] #0: ffff888054920258 (&vq->mutex){+.+.}-{3:3}, at: handle_rx+0x1c5/0x1fe0 [ 446.139342][ T30] #1: ffff88801d942040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 446.150682][ T30] 1 lock held by syz.3.1146/8837: [ 446.155808][ T30] #0: ffff88801d942040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 446.167139][ T30] 1 lock held by syz.3.1146/8842: [ 446.172170][ T30] #0: ffff88801d942040 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 446.184158][ T30] 1 lock held by syz.3.1146/8846: [ 446.189321][ T30] #0: ffff88801d942040 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 446.202190][ T30] 3 locks held by syz.2.1686/12402: [ 446.209204][ T30] #0: ffffffff8fa61490 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 446.220478][ T30] #1: ffffffff8fa6e008 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x83d/0xca0 [ 446.229729][ T30] #2: ffffffff8e73cbb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 446.241139][ T30] [ 446.245456][ T30] ============================================= [ 446.245456][ T30] [ 446.254404][ T30] NMI backtrace for cpu 1 [ 446.258758][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 446.269276][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 446.279350][ T30] Call Trace: [ 446.282638][ T30] [ 446.285576][ T30] dump_stack_lvl+0x241/0x360 [ 446.290280][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.295494][ T30] ? __pfx__printk+0x10/0x10 [ 446.300102][ T30] ? vprintk_emit+0x631/0x770 [ 446.304830][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 446.309871][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 446.314831][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 446.320302][ T30] ? _printk+0xd5/0x120 [ 446.324469][ T30] ? __pfx__printk+0x10/0x10 [ 446.329072][ T30] ? __wake_up_klogd+0xcc/0x110 [ 446.333934][ T30] ? __pfx__printk+0x10/0x10 [ 446.338539][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 446.343568][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.349560][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 446.355563][ T30] watchdog+0xfee/0x1030 [ 446.359908][ T30] ? watchdog+0x1ea/0x1030 [ 446.364328][ T30] ? __pfx_watchdog+0x10/0x10 [ 446.369002][ T30] kthread+0x2f0/0x390 [ 446.373073][ T30] ? __pfx_watchdog+0x10/0x10 [ 446.377749][ T30] ? __pfx_kthread+0x10/0x10 [ 446.382338][ T30] ret_from_fork+0x4b/0x80 [ 446.386751][ T30] ? __pfx_kthread+0x10/0x10 [ 446.391346][ T30] ret_from_fork_asm+0x1a/0x30 [ 446.396116][ T30] [ 446.400622][ T30] Sending NMI from CPU 1 to CPUs 0: [ 446.406966][ C0] NMI backtrace for cpu 0 [ 446.406979][ C0] CPU: 0 UID: 0 PID: 12391 Comm: syz.3.1685 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 446.406998][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 446.407007][ C0] RIP: 0010:check_preemption_disabled+0x5d/0x120 [ 446.407038][ C0] Code: 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b 24 [ 446.407051][ C0] RSP: 0018:ffffc9000fbaf300 EFLAGS: 00000046 [ 446.407066][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffffff816fbac4 [ 446.407077][ C0] RDX: 0000000000000000 RSI: ffffffff8beae240 RDI: ffffffff8c3f8900 [ 446.407089][ C0] RBP: ffffc9000fbaf488 R08: ffffffff8ff6816f R09: 1ffffffff1fed02d [ 446.407100][ C0] R10: dffffc0000000000 R11: fffffbfff1fed02e R12: 1ffff92001f75e70 [ 446.407111][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 446.407123][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 446.407136][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.407147][ C0] CR2: 0000000020073000 CR3: 000000000e534000 CR4: 00000000003506f0 [ 446.407160][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.407170][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.407180][ C0] Call Trace: [ 446.407186][ C0] [ 446.407192][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 446.407209][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 446.407229][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 446.407244][ C0] ? nmi_handle+0x2a/0x5a0 [ 446.407267][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 446.407285][ C0] ? nmi_handle+0x14f/0x5a0 [ 446.407299][ C0] ? nmi_handle+0x2a/0x5a0 [ 446.407314][ C0] ? check_preemption_disabled+0x5d/0x120 [ 446.407333][ C0] ? default_do_nmi+0x63/0x160 [ 446.407350][ C0] ? exc_nmi+0x123/0x1f0 [ 446.407365][ C0] ? end_repeat_nmi+0xf/0x53 [ 446.407383][ C0] ? lock_acquire+0xd4/0x550 [ 446.407402][ C0] ? check_preemption_disabled+0x5d/0x120 [ 446.407422][ C0] ? check_preemption_disabled+0x5d/0x120 [ 446.407443][ C0] ? check_preemption_disabled+0x5d/0x120 [ 446.407463][ C0] [ 446.407468][ C0] [ 446.407476][ C0] lock_acquire+0x1b0/0x550 [ 446.407497][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 446.407513][ C0] ? deref_stack_reg+0x1c7/0x260 [ 446.407536][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 446.407554][ C0] ? deref_stack_reg+0x1c7/0x260 [ 446.407577][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.407595][ C0] is_bpf_text_address+0x46/0x2a0 [ 446.407613][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 446.407630][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 446.407647][ C0] ? is_module_text_address+0x128/0x190 [ 446.407666][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.407683][ C0] kernel_text_address+0xa7/0xe0 [ 446.407700][ C0] __kernel_text_address+0xd/0x40 [ 446.407714][ C0] unwind_get_return_address+0x5d/0xc0 [ 446.407733][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.407754][ C0] arch_stack_walk+0x125/0x1b0 [ 446.407775][ C0] stack_trace_save+0x118/0x1d0 [ 446.407794][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 446.407818][ C0] save_stack+0xfb/0x1f0 [ 446.407837][ C0] ? __pfx_save_stack+0x10/0x10 [ 446.407853][ C0] ? free_unref_page+0xd19/0xea0 [ 446.407867][ C0] ? vfree+0x186/0x2e0 [ 446.407883][ C0] ? kcov_close+0x2b/0x50 [ 446.407900][ C0] ? __fput+0x24a/0x8a0 [ 446.407917][ C0] ? task_work_run+0x24f/0x310 [ 446.407931][ C0] ? do_exit+0xa2f/0x27f0 [ 446.407944][ C0] ? do_group_exit+0x207/0x2c0 [ 446.407957][ C0] ? get_signal+0x1695/0x1730 [ 446.407972][ C0] ? arch_do_signal_or_restart+0x96/0x860 [ 446.407989][ C0] ? syscall_exit_to_user_mode+0xc9/0x370 [ 446.408007][ C0] ? do_syscall_64+0x100/0x230 [ 446.408029][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.408052][ C0] ? page_ext_get+0x20/0x2a0 [ 446.408071][ C0] __reset_page_owner+0x75/0x3f0 [ 446.408088][ C0] ? mod_memcg_page_state+0x4ae/0x770 [ 446.408109][ C0] free_unref_page+0xd19/0xea0 [ 446.408129][ C0] vfree+0x186/0x2e0 [ 446.408147][ C0] kcov_close+0x2b/0x50 [ 446.408163][ C0] ? __pfx_kcov_close+0x10/0x10 [ 446.408180][ C0] __fput+0x24a/0x8a0 [ 446.408204][ C0] task_work_run+0x24f/0x310 [ 446.408222][ C0] ? __pfx_task_work_run+0x10/0x10 [ 446.408239][ C0] ? do_exit+0xa2a/0x27f0 [ 446.408251][ C0] ? kmem_cache_free+0x145/0x350 [ 446.408272][ C0] do_exit+0xa2f/0x27f0 [ 446.408291][ C0] ? __pfx_do_exit+0x10/0x10 [ 446.408305][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.408324][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.408344][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.408361][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 446.408380][ C0] do_group_exit+0x207/0x2c0 [ 446.408394][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.408409][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 446.408428][ C0] get_signal+0x1695/0x1730 [ 446.408452][ C0] ? __pfx_get_signal+0x10/0x10 [ 446.408474][ C0] arch_do_signal_or_restart+0x96/0x860 [ 446.408494][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.408510][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.408535][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 446.408556][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 446.408576][ C0] do_syscall_64+0x100/0x230 [ 446.408594][ C0] ? clear_bhb_loop+0x35/0x90 [ 446.408610][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.408629][ C0] RIP: 0033:0x7f40aeb779f9 [ 446.408642][ C0] Code: Unable to access opcode bytes at 0x7f40aeb779cf. [ 446.408650][ C0] RSP: 002b:00007f40af979048 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 446.408664][ C0] RAX: 0000000000000000 RBX: 00007f40aed06058 RCX: 00007f40aeb779f9 [ 446.408675][ C0] RDX: 0000000000000800 RSI: 0000000000003000 RDI: 0000000000000000 [ 446.408685][ C0] RBP: 00007f40aebe58ee R08: 0000000000000000 R09: 0000000000000000 [ 446.408695][ C0] R10: 0000000020ffb000 R11: 0000000000000246 R12: 0000000000000000 [ 446.408705][ C0] R13: 000000000000006e R14: 00007f40aed06058 R15: 00007ffc4339b408 [ 446.408725][ C0] [ 447.193242][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 447.200138][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 447.210671][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 447.220741][ T30] Call Trace: [ 447.224026][ T30] [ 447.226961][ T30] dump_stack_lvl+0x241/0x360 [ 447.231631][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.236817][ T30] ? __pfx__printk+0x10/0x10 [ 447.241388][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.247442][ T30] ? vscnprintf+0x5d/0x90 [ 447.251755][ T30] panic+0x349/0x860 [ 447.255633][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 447.261764][ T30] ? __pfx_panic+0x10/0x10 [ 447.266159][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 447.271514][ T30] ? __irq_work_queue_local+0x137/0x410 [ 447.277041][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 447.282393][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 447.288527][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 447.294668][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 447.300804][ T30] watchdog+0x102d/0x1030 [ 447.305120][ T30] ? watchdog+0x1ea/0x1030 [ 447.309522][ T30] ? __pfx_watchdog+0x10/0x10 [ 447.314183][ T30] kthread+0x2f0/0x390 [ 447.318244][ T30] ? __pfx_watchdog+0x10/0x10 [ 447.322906][ T30] ? __pfx_kthread+0x10/0x10 [ 447.327487][ T30] ret_from_fork+0x4b/0x80 [ 447.331892][ T30] ? __pfx_kthread+0x10/0x10 [ 447.336471][ T30] ret_from_fork_asm+0x1a/0x30 [ 447.341230][ T30] [ 447.344456][ T30] Kernel Offset: disabled [ 447.348765][ T30] Rebooting in 86400 seconds..