last executing test programs: 34.973366328s ago: executing program 0 (id=1762): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0201000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000001b00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 34.642254986s ago: executing program 0 (id=1764): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffd) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0xc04102) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x1ff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x9, 0x0, @fd_index=0xa, 0xfffffffffffffff9, 0x0, 0x0, 0x15, 0x1, {0x2}}) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) r6 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000100)={0x0, 0xffffffffffffff3d, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r10, 0x0) migrate_pages(0x0, 0x1ff, 0x0, &(0x7f0000000000)=0x1) (fail_nth: 3) preadv2(r2, &(0x7f0000001580)=[{&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000200)}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)}, {&(0x7f00000014c0)=""/129, 0x81}], 0x7, 0x101, 0x4, 0x12) ioctl$TIOCSETD(r4, 0x5423, 0x0) 32.87421167s ago: executing program 2 (id=1774): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0201000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000001c00000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 32.73042275s ago: executing program 2 (id=1776): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x2, 0x1, 0x3, "868f909c1a611885045b85a75a2f0bb002ef8eaff92820eb2368592e975a863c", 0x50313134}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x10010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) syz_usb_connect(0x3, 0x48, &(0x7f00000023c0)=ANY=[@ANYBLOB="12011001fb25052075328500a01701020301090236000107f7100609044b01045f0d40ff09050708080000f10909050f1000040b0185090582d99d00010701090506"], 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x10}}], 0x48}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x26, 0x0, @fd_index=0x7, 0x7, &(0x7f0000000300)=""/78, 0x4e, 0x1}) ioctl$TIOCSTI(r2, 0x5423, &(0x7f0000000080)=0x7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001480)="2eec116d8cb4d8eb000786c758837b78", 0x10}], 0x1}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r5, &(0x7f0000000080)='=', 0x1}]) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) getpid() socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c000180090001006d657461000000001c0002800800014000000000080001400000"], 0x84}}, 0x0) 29.496470263s ago: executing program 2 (id=1786): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x12060000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030007008500000005000000bf090000000000005509010000000000ac00000000000000b7020000000000007b9a00fe00000000d6090800000000007b9af0ff00000000bf8600000000000057080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$pppl2tp(r0, 0x0, 0x0) 28.650157896s ago: executing program 3 (id=1788): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630199000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 28.598171695s ago: executing program 3 (id=1789): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x1, 0x0) epoll_create1(0x0) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x202280) connect$pppoe(r1, &(0x7f0000000440)={0x18, 0x0, {0x3, @local, 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'ip6gre0\x00'}}, 0x1e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030e000000000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200130002"], 0x70}, 0x1, 0x7}, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'vlan1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) 28.404732002s ago: executing program 4 (id=1790): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000bf090000000000004509010000000e709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 28.227805831s ago: executing program 4 (id=1791): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000060000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c0000007a0b0900000300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x0, 0x0, 0x0, 0xfff7f038}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = io_uring_setup(0x30d0, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "ce8869e61c037ea6", "c0f8070000001aeefece1c83a6f8a5e5", 'Ol<8', "9f00009ff5843cfd"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "42ce9c61a27e7d52efe8425020d59b8d3103a3f9683264efb853aa040ac374d56b70c5554dd53c4fd6f94def1053bfbe25d5f8fd581c6dfd6ebef96f8a00233cbf7c4de0e2d5cc5c6fc7c0e2b84f861025c5ef7f3c665d0980c919d23f4e2cfc66c5d0c3e9f0c78ba4b20799eb5015e0f6a8d94eb5416f0ce9a91f13060bd52c3c1b"}, 0x6a) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) statx(0xffffffffffffffff, &(0x7f0000000380)='.\x00', 0x0, 0x2, &(0x7f0000000240)) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)='\"', 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000003c0)="b2", 0xffffffa5}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 26.757795785s ago: executing program 3 (id=1792): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x100000000) r1 = socket$packet(0x11, 0xa, 0x300) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bff1d4b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) ioctl$HIDIOCGREPORT(r3, 0x501c4814, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003a000b56090000000000000002000000c1fe0080130001"], 0x2c}}, 0x0) syz_emit_ethernet(0x11d, &(0x7f0000000540)=ANY=[], 0x0) 26.340861185s ago: executing program 2 (id=1794): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002565e940450cb0627546000000011f0212000100000000090400000039a21700"], 0x0) 26.256112161s ago: executing program 4 (id=1795): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, &(0x7f0000000280)) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) madvise(&(0x7f0000041000/0x2000)=nil, 0x2000, 0xd) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000640)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYRESOCT=r3]) r6 = getpgrp(r5) (async) gettid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)) (async) setpgid(r6, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x294}}, 0x0) (async) unshare(0x8040480) (async) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f0000000300)={0xc1, 0x0, 0x6}) r9 = socket$packet(0x11, 0x3, 0x300) (async) io_setup(0x0, 0x0) (async) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r10, 0x8915, &(0x7f0000000440)={'vlan0\x00'}) close_range(r8, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r9}, 0x68) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000480)=""/232, &(0x7f00000000c0)=0xe8) 25.969968754s ago: executing program 4 (id=1796): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6a, 0x1, 0x0, 0x0, 0x6}) (async, rerun: 32) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x9) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xc63, 0x2, 0x2, "bf51576454198fd35ba523e19cac6e9757ecfd8a189a6d914fd0623f919a08e5"}) (async) getdents(r0, &(0x7f00000000c0)=""/233, 0xe9) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r2 = socket$isdn(0x22, 0x3, 0x11) connect(r2, &(0x7f0000000200)=@vsock={0x28, 0x0, 0xffffffff}, 0x80) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) (async, rerun: 32) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x3, 0x4040, 0xe6b7, 0xf, 0x80, 0x40}}, 0x50) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000380)={0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) write$cgroup_int(r0, &(0x7f00000003c0)=0x2, 0x12) sendto$unix(r0, &(0x7f0000000400)="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", 0x1000, 0x4004000, &(0x7f0000001400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001480)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x68, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x88000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001640)) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001680)={0x0, 0x8}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001700)={r5, 0xfda, 0x3, 0x4}, &(0x7f0000001740)=0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001780)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001800)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001840)={&(0x7f00000017c0)=[0x0, 0x0], 0x2, r7}) (async) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f00000018c0)=@sg0, r8, &(0x7f00000019c0)) (async, rerun: 32) recvmsg$can_raw(r0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001a40)=""/82, 0x52}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)=""/141, 0x8d}, {&(0x7f0000001bc0)=""/121, 0x79}, {&(0x7f0000001c40)=""/50, 0x32}, {&(0x7f0000001c80)=""/66, 0x42}, {&(0x7f0000001d00)=""/246, 0xf6}, {&(0x7f0000001e00)=""/84, 0x54}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/239, 0xef}], 0xa, &(0x7f0000003040)=""/4096, 0x1000}, 0x2042) (async, rerun: 32) socket$nl_crypto(0x10, 0x3, 0x15) listen(r2, 0x10) (async, rerun: 32) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async, rerun: 32) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000004080)=r1) 25.969272548s ago: executing program 1 (id=1797): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x5, 0x3, &(0x7f0000000040)="d8ed"}) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) sendto$inet6(r1, &(0x7f00000000c0)="3002fca2911d0bedd404e6cc4cedaec96e27180da6bef8e2ce7a0a23812efc7578ca1ee3ec7d7ce9a0c790c7b7eaf484ee8f61b052d34065d38f5a38735b7959ce90877f67966f090b04b1625c68b2e6187212c03bedf076ed65e3576f9db1bdafc4d350b2435c89de162adec4b68454", 0x70, 0x20044090, 0x0, 0x0) (async) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x47, 0xfffffff8, 0x5, 0x200, r3, 0xfffffe00, '\x00', 0x0, r4, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000340)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) sendto$packet(r6, &(0x7f0000000380)="df2312ff8d51deca138fac61a9022ab25eda5c2b5a66b345e3c7e68a6a43d10321f5517c9db67be72e1c3e8c2979c01004a04517998e567aef678970", 0x3c, 0x4040854, &(0x7f00000003c0)={0x11, 0x18, r7, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000600)={{0x0, 0x2, 0x8e0, 0x3, 0x8, 0x0, 0x9, 0xfffffff7, 0x9, 0x10001, 0x7, 0x0, 0x8, 0x1, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001600)={r8, r9, "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", "e0219cce259497ad877355e17ed6466468d898f1e6399175e97c2b64a3feeeafe4710b666fd5b18e5ae59dfb4cc1c15d7a61ca9bedcd6ecda20254e1a68285aaa44a72869c0cc16df0924b08b5b02cc7e3d01cfb620ed1f6f21cf8eb29f381d64236f31d382bfcc15ec999be3a5d7b06ef0ac03db51c2bce36ddd2f411ce00d6bcba85e25f02689b6ca65b38a89a862edb21541f5c6bfb2ebfbc30b521e880ac4651594b3a87fe604e78a5bb8f6737d328790452dd922163a2383fcd4646b8ee06a8edee3bbbc376cb1d851f4339255bd7d0500ea8d16935e3bcdb29dc25ce02eadbcfb1438eb8ef996e0b63403ba4e2c47678551d645b5164d0cf376e365cae776ffe8c351d1a793a7f9650ae992c1966b342c3b13ed58604818e37909a87b64a3efb379db41b487205664908b884dfe597b5314e25cd87704ec6a6c07fe27a7765f9194e7e0fcdd97fdf46be797c84ef2bdb8683e76bdbdf4c6de2218d16b00bf8f0b2ba1025b0906ecdf212262f9c46d81e2e2f53ee01596cd01c3a1b9df66d52f787bb48a117a16cb3561d0909c5211b101957a684cd19c9abbeedd2282e97e55057363b1063a3fcb304fd74114c4ef237520b1cc2b5fb7f62246c82c89532bc2cf6cb4deea20a3be25b89393b8ce97fc31e53b5321855660ea3be43f80824ceb3fbf9d2f0e04eff4e6d2f9a0496eb554b47d7ce62cc69c7b8cc1bcd01d9d35fc63ecdd612f9a1e40993823b6e9b2d5b1c66e08bc5048f617db756cf362cc8c628a3ed9fe7fdece3ffd7b019b74c9f39993395b890b5c27c22985dd62c67bf962e38007b7ea5a441cf95872aa55528650a29e238370d4863961d804cc75da68cf9011b1b95f34f342eebb867f27f89a4e9d6ec4c860e2cbbd271f100d6140e513e8e04e1e149e7f6681cdefc78175738ede5542a154319f54d5ad9a3b4ae1093a1ad251913755f64d2606e1a990cfeb4e0b365083202809be8ddf77e4a53834110707e07de207f943e9d81e789b79ff2fae212f71c247fdc30f42a8a0ff8476e612220bb519ebfb09eb73e4571d42979ed0f67f501b09d7eb57055af464be844a085ced62eb0440e83473352a02a53d8b1a3d1ee3ab431e0b24fd93a2975431b495822a30191211481c0f07c2b0efd18d5d17456d5cab9c80cdcfc7e1ca1276feaddc24ea72a24cde062d402b9f0dd37eb4b9d5bcde27674783ecce3d81cc426f24047fdb1728ddfb345b7ad662e10e950ab40f1a19975de6cbf86401d3cbd84db878a0794f8149305db2976e0bbacc4838cb3d1685297ae9c299cc076ef7d51513b6364f7eec2f93c0cd35528a3d9ec1a259490f4f2c2cc47f3ee85caa504ef669bc48bb8c2714d8efb03271b912ca26f40c36c08378d4fb178b81eddf60a967ab62ab30ebd9032334dfd334f31145787b8c9a5896a686a6f8c89667408b979d0234a7759a4ac5083b3e467fc943d2097aba2918c2930a732efcafbe7d3e780cf7cf1bf9044f0143c3c8915c713f407399c0d54bb57f730b84004e9854fdcb014cfa3653724ca08353b76001507f672b6c2ab241a11f2dc9afb30d6dc8d50a376b922b0556ec77f07fb793a7e0678e08dd2cb0d0141d40a960a14eeda2ef4398c3d4b27ee8e7c74b51cd83d8dbd7557b871401bbd5775362c62b256dd9f52dafd840831760d946743245342169e55877a34749b7240525917bc589bb2cf2fd2ed36402a844427f0b8005be0045449eec553e74a9ae57e43bf80fcd93b29e26a307321a5b5f02df56c90743136352ef77ccfe040f727b3de8c0cf1b1e260c5b505add1dd1ae8cf3acbdda6237272bd9a2d362b7d79d940952e7b322fba7fd64e9015b380b10bbe6e44b4d653b387c6e263e1740de41021200866c6990e0e81552959585ff37b0896e7f68575bdaec9cabf7bc4a515d4a27f788bebbd4bfe4c97f88599dad55f207524ce4ed1002f66014748a75d65864f79cfe136a3b0c221c138af76cd9e235556cb87873ffdd747c90a019320f1a8568950b19bf4dfb42c60347abfe846e125559900646c47bbd73e269ae0d614ed810da510072c5edac547c7c231250dff1f059fce6abec9c3b87f7e2e27e2c3f92293af3e40791cc2d92576505b7b43ae79831fe8f6dc95e7ee66f7e3458af84d9eca1e0851eb21b3868033df34d72fb920f0ea60621954bb4cdfdb993ec6d0ddb5162db96271c977622336f1c2e33fea27cf9031a34dc0e621458e5482bcb73e5a70e7fdd2b44abd1e40988d9582cb7443546e059a16ca2266090ef3fee1c95be57722715cf97e77289aed0af21d49c22526325cf2e851891ee3429b16250305065264eeca35a4e8b0357e380738a1559a8cb558f7fdb6a4c95b5e4604322496530e96cf710c8fda885b99ae66cb45bcb08cc4c7b1b1fcd527e322df9fd9f938bebf50c9d740f9975e4ef7484a3545db6d89081f4a8632d6bb521a93cf3367e109b60fb4bd44edbefd45bcc9551670406ed7b0887bce3692199196b66c18d2b8e4a5e6d23fd47ce8c2ebea0015bc978cb4e2ee724a6789773b01b4a87aa617811337ac43fb15e8838e3a151cc4c20af7cd6d17899967c5126627771d3c5cc8be2ee64f8c0bde77a35152b9affa38ace534c6005b2f09e979b59a1078ce8ca97f53d0615fb77c768fd86bb7dfd119ca9995b154c995cf6c3b1255d019876cf78a5753a1658cad6728d7aff9f61bc830c2744b073b427dbd6aca1317f246ec49c376a3f37cf1050c38faf3b4b6a5f7ad2c2c3b051b452eba58a447d65d537c9fe73b2918b084fcaf486c2068bcb9753819ade28d9e9bd7705f99a5969fa5b0bb95553c6a3ec3fb485498f40290606e56bd37d43d97f4ba1c3488074750ea47bec6c9bf894b7d5a8263f24d0c559fb2faf70d7ea64b3e868f5326e885cad62aa9189959f2f69ea9424fbf03c3e6ce87a53787b3061701c5d8a1020c683dfe88bc2d8b7dac5802b6299e37dc77d2987f0a41414ecf4669a0c666094836fe3af2854ab053cf514750bd70f9e879444ffd46ca6f3d30c3780b38c26fb405f5a6a1f680b0c36ab73a5e46ce5f484793fdc7571e59e78544b34c94896d65037bb2d3068b325b48daf08c3bdcab62a1ac7512608c18e4a88e92bc28724109e6b3986f5392a44fad6215c3a6e3f39252c97b9c3ec40e6e860b98d686ce2cafbb7fe1bd7b3f6c12d157d43fbf219417de9ed8470556210b95613c79a012aff73b07c28504a9cbcea3afa38494a49021b5ae1b2f036f538e863afc7930aa46152cac2f98eab8b75e487d8c371eeea11e31d0ff1c0516a1a2793c7cd180fda2d99693193569aeed9667c35bef83d5e7bfd5bd536ec82a053b05282638484230ce93e3ea6b38efe728200f1ae5888851f4484cbad17f392c9ec51ab8d0c8f871ae90f4ea677f5a021c802cd8618fc6fc85d0c9b8b199c4eec74c041e0071acf6d66584efc6858605a87490232aefe6db2715feb35fb83b5132b778e3da05f076bcda6f391f92b45c7943600a084c00def9e8b7cc6209e944f919433182ffb839c3acda3573279518b0d312b8fffe5d7d25a6d747127fef8a734e13d592aa8934ab0a258a210b7cf91487866748b29a0564ade1ff6fb231e5d0eae8dd5ddd39ec677f082abb173f986b3e0a37acc29dcbaed1e62168b2989b45fde355fd97b79338bed780bbb15b530ce03c38c52619f1a46af7026ff2a1822b2e5b7e78230bdd2e0fc005123592ea8e878283a99b3b8f3d243296e563456d8e735f96aa38af71d7be1f7664e918921e9564c4fa2087fc35945f7b8f9f060d093482f1b10292d265c2ce5174de24429a1f4fbb479ea9886da9fe03f908c7d4d4efdd31ea90f82e12264ff038aa688e2184fec9a04affd9f0002a6d7fe902f18d3cbc6c43cbbbb4e3ee8f59c3e2b9acaeb053a177505f008057a9a18c91807d9df5875e4d896cc281a059aa4e9db24ad34d3ea0106e56ecd5587f37ebae2360a2a219438fbaf4a4ec174650520256819332ffac8441d0cb3e30fba5688025ae1e76d7e0bd7aee4d862db3a39da71eab6c9cd223151e2bcf72d6961f8612d266e86d1cb5d8d7d6102cac2c7c0619be6f26dad1e0121cb42d92dc2aef0981882070c983fcb353e151bce954cb819d1aa4b60c0096b498dacea2a8be3b7b7b8bbb0c5b123644f8c26093c9ae94e53e8c9d74cc8f717487ea52a823163d1a9fe46047c24587048acf771c51946a3be9f0f0f5e30ac3ba73e2ed775ee1207071d607543c3ccf9199bcae6ae5eb92ecd9ec1f72b9151dfc09c84085ada640f288d081f9b3cf54132446366605467027129729f22e18b14d336593d77f54b86289efe5014b3118a501e513c644919eca9f0b9ca402ad228f9099ed8ca4e4a85a3b464f9ad66481ac3c7a937718666eccfe98d582312fd6df1bf714f35d75c5238c3292f97f7265ce9f52d7d99760b82a020be7ed6fd4646773dd3abd0dab9c2e38ff8f590fb82fbd4b081bac9b07e506481af45f7b012fbf501e9022a20bbc7d19395fa29a62fd2e6b2c128c79297aedd7ce979b4893d75c5eea67cb8acb1e8686c1b8cbd04a07958064186168282972ac8a72e7ca45ee233f1a0c9c4ee779cd81577e635479b4fc6ae4b9ac97d4450a8904f59cb90037ef1895f243c9617b31f2e6f553f4aac6208edc2d0253ff1b1f17ca6ba1486e17f2bcadb4df64084078efe76b18d0600342466277ba26708c62cb171069ff15d163a5dad614f1b11088cc9098d8616ef1ee4a447cdb1cfda78b13e8f500ee77dbd20c3dfbea21baf3ff4d7c36cb098f7d604bdd79b44c08c363d5d606e0371f83d4258b283059cf4b674d63ae8a07b2631f5c17c952035efd9f84b992c158bc3c708d17474ba74070652cf7396b365bbfaaae9ea5bed646a8649cc4a5fc75bd771b593b9ee92399af8cbf3db705b8fe6caf336e1713f707d23844f5e7929cb05d2449aef7f58c5831aafbcdfa3c6bc7f9420490d7f6f01a6817e8260d8b64eb2e4dd63886626ad250c195441051afef4530b17928bbf15d46b9be8f5bc2e3661f4d0ae08450199119bb0377112ee6d072a1c234c90574ce442969dfdd4f23931b762533dad59b47e0fe39d36c4ca6cea66a205345bbff839eea75eb0352ed7f6afab68aca2a825df0305c95e2a9cf428b001842a3003192e20597776e65e4bbddb1c5deb5f809056b4d52bad8521150c584b938526cc1f899ea72ea08b1382a41f3b849a46d36acb838e6d4536826da6879ea218f5fb1150d6efe02796a9a0d3bdaa1c29103339b6a34972fbe256fda8c176e31143649dcc3b298a72a27d91d66df8c6d2c24be94350a37d44ef74bcb6da92c645a92fc725e7ac5f02c753d9b864a6195b37a02ac97825047c9a7ed61199a79e9"}) (async) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000002600)=0x8, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002640)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x100, 0x9, 0x1, 0x4, 0x5, 0x5}, &(0x7f0000002700)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000027c0)={r11, 0x48, &(0x7f0000002740)=[@in6={0xa, 0x4e24, 0xffffffff, @private2, 0x2}, @in6={0xa, 0x4e21, 0x40, @rand_addr=' \x01\x00', 0x1}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000002800)=0x10) (async, rerun: 64) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002840), 0x48000, 0x0) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r12, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x8000) (async) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000002980)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x59, r7}) r13 = dup3(r10, r10, 0x80000) bind$inet(r12, &(0x7f00000029c0)={0x2, 0x4e24, @multicast1}, 0x10) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f0000002a00), &(0x7f0000002a40)=0x4) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002ac0), r13) sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000002d40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d00)={&(0x7f0000002b00)={0x1d8, r14, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xfa, 0xa9, @random="dc3cf41a8f1732bc821c01261c50d36218e1dbd68deb69f5700cd7e7f77a0a87252adfa863051ab319f27ceca5e94e1cc55ded0a268f6f0cb5bd30c3ed3d56e9d1f0647ffd115a54c24a143baaa93c1540a425b2efc1b6f0652bb87a8ef60dc76dc9d855ccb636600937919e4f83e2cc30032131148d6d65a5623528877ddc56975130b0e97b593a0d5abcb4ce1d49aee9b20a9ff6dfe869f3ef3d45c64b8ec08472141b5bf5fc1b8a6266b802385fbc1574b498d079f6fda864cc4ee755b369c87c4d8e6091775a658884fab4a42188449a64085b982e9d8cb8b3af92d961efaf4ece98af62985f983cfcdc70fe497d164bada9b41e"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8c, 0xa8, @random="179375a76a2b2f5b2fd4140815f6645913be2f90b80b2801ed062e3cc60b5a6e630dde938f026d58167f246aeb4673fa5fa6c7a41f82075753b1086e035158c14849f17f2719ac6dd9a505aa274993b90dddfe45d5af5aab0f82192f97b14a2488edaa5fa081e27fce727efe1f4b10f49bc687ab66b6226b7c07a28385794725c4b7dce1475ab3b9"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x5687507fd04d2b84}, 0x20004000) socket$packet(0x11, 0x2, 0x300) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb3, 0xb3, 0x8, [@union={0xd, 0x9, 0x0, 0x5, 0x1, 0x5, [{0xd, 0x3, 0x8}, {0x10, 0x1, 0x1}, {0x7, 0x0, 0x80000001}, {0x0, 0x5, 0x401}, {0x5, 0x1}, {0x9, 0xdf3, 0x7}, {0x6, 0x4, 0xc}, {0x4, 0x4, 0x9}, {0x6, 0x1, 0x5}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x4, 0x4}], "a44e17"}]}, {0x0, [0x30, 0x30, 0x5f, 0x61, 0x2e, 0x2e]}}, &(0x7f0000002e80)=""/200, 0xd4, 0xc8, 0x0, 0x3, 0x10000, @value=r13}, 0x28) dup3(0xffffffffffffffff, r15, 0x80000) 25.838851369s ago: executing program 4 (id=1798): syz_open_dev$evdev(0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) chdir(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x10002, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000003010040"]) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x21ee01, 0x0) dup(r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000024000100000000000000000005000000d1f711831300d942a5e48cb787858059ff3cd0f155586e0576498bcc900fce3105bc459d490ef14b281327aea9119727e0c82a4de5ae"], 0x14}}, 0x0) 25.721363258s ago: executing program 1 (id=1799): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8180040000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 25.546121632s ago: executing program 1 (id=1800): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b110000000000008500000005000000bf0900000000000045090100000010709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 25.511592978s ago: executing program 1 (id=1801): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20002, 0x8) write(r0, &(0x7f0000000200)="1f", 0x1) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x600, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x6, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001403) ioctl$TUNSETOFFLOAD(r6, 0x40047451, 0x20002eae) 25.203014881s ago: executing program 1 (id=1802): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x103}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000100)='4', 0x1}) (async) io_uring_enter(r0, 0x7f5f, 0x0, 0x0, 0x0, 0x0) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r5, &(0x7f0000000140), 0x2) (async, rerun: 32) preadv(r5, &(0x7f0000000000), 0x1000000000000166, 0x0, 0x0) (async, rerun: 32) shutdown(r3, 0x0) 25.042826632s ago: executing program 4 (id=1803): syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') listen(0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1, 0x0, 0x80, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 24.762301596s ago: executing program 1 (id=1804): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x9e235000) (async) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) (async) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x001'], 0x0}, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) (async) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f00000001c0)) 23.222946594s ago: executing program 3 (id=1805): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000002140)=""/4043, 0xfcb}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000980)=""/214, 0xd6}, {0x0}, {&(0x7f0000000040)=""/25, 0x19}], 0x8}, 0x0) 22.382497051s ago: executing program 2 (id=1806): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getnetconf={0x14, 0x52, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2ddb}]}]}, 0x27}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3eb4055bdebd7828}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x44}}, 0x880) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r6, 0xa49a, 0x30}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x101283, 0x100) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000140)={0x1, 0x8}) 22.305582027s ago: executing program 3 (id=1807): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0xa, @win={{0x4, 0x753, 0x33565348, 0xf50}, 0x8, 0x5, 0x0, 0xfffffff7, 0x0, 0x5}}) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = syz_io_uring_setup(0xee8, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd, @flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x792b, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000001540)=[{&(0x7f0000000540)="90c7517294", 0x5}], 0x1, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21.138070829s ago: executing program 2 (id=1808): syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3f, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0xfffffffc}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x10}}], 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x40000000000001c, 0x10003, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r2, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_clone3(0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="02", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7c, &(0x7f0000000080), &(0x7f0000000040)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x74, 0xaf, 0x1e, 0x20, 0x4b4, 0x2, 0x53ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1c, 0xaa, 0x71}}]}}]}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) 17.280698735s ago: executing program 3 (id=1809): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f00009e7000/0x2000)=nil, 0x2000, 0x1000006, 0x80010, r2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x492b, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) sendfile(r7, r5, 0x0, 0x8a000) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000380)={0x3, 0x8, 0x0, 0x9}, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="04000000", @ANYRES16=r0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="05002e000100000008002c00000000000500330000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000040) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r8, 0x0, 0x155}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000240)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x9, 0x0, 0x0, 0x3f}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r8, @ANYRESDEC, @ANYRES64, @ANYRESDEC=r4, @ANYRES8=r1, @ANYRES64, @ANYRES16=r8, @ANYRESDEC=r9, @ANYRES8=r6], 0x48}}, 0x40) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r10, 0x4) accept(r10, &(0x7f0000000000)=@can, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r11, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.142428977s ago: executing program 0 (id=1765): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000005000000bf09ba000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.79831457s ago: executing program 0 (id=1814): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB='v:'], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 125.863561ms ago: executing program 0 (id=1815): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0201000000000000000000b7080000000010007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b120bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 0 (id=1816): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000002140)=""/4043, 0xfcb}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f00000007c0)=""/180, 0xb4}, {&(0x7f0000000980)=""/214, 0xd6}, {0x0}, {&(0x7f0000000040)=""/25, 0x19}], 0x8}, 0x0) kernel console output (not intermixed with test programs): mmy_hcd [ 378.015206][ T5284] usb 1-1: Using ep0 maxpacket: 32 [ 378.050359][ T5284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 378.071079][ T5284] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 378.097405][ T5284] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 378.126878][ T5284] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 378.161641][ T5284] usb 1-1: config 128 has no interface number 0 [ 378.169580][ T5284] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 378.181828][ T5301] usb 5-1: device descriptor read/64, error -71 [ 378.216075][ T5284] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.248854][ T5284] usb 1-1: config 128 interface 127 has no altsetting 0 [ 378.278747][ T5284] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 378.301381][ T5301] usb usb5-port1: attempt power cycle [ 378.315808][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.357127][ T5284] usb 1-1: Product: syz [ 378.367834][ T5284] usb 1-1: Manufacturer: syz [ 378.387583][ T5284] usb 1-1: SerialNumber: syz [ 378.471514][ T5283] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 378.681225][ T5283] usb 2-1: device descriptor read/64, error -71 [ 378.844289][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.851104][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.951156][ T5283] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 379.061309][ T3206] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 379.103189][ T5283] usb 2-1: device descriptor read/64, error -71 [ 379.213311][ T5283] usb usb2-port1: attempt power cycle [ 379.251735][ T3206] usb 3-1: Using ep0 maxpacket: 8 [ 379.259181][ T3206] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.276671][ T3206] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.300877][ T3206] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.324350][ T3206] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.359348][ T3206] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.382383][ T3206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.542849][ T5284] usb 1-1: USB disconnect, device number 80 [ 379.592053][ T5283] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 379.603757][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.626506][ T3206] usb 3-1: usb_control_msg returned -71 [ 379.649099][ T3206] usbtmc 3-1:16.0: can't read capabilities [ 379.664043][ T5283] usb 2-1: device descriptor read/8, error -71 [ 379.692362][ T3206] usb 3-1: USB disconnect, device number 58 [ 379.911209][ T5283] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 380.151112][ T25] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 380.169842][ T5283] usb 2-1: device not accepting address 87, error -71 [ 380.226972][ T5283] usb usb2-port1: unable to enumerate USB device [ 380.356575][ T25] usb 4-1: config 2 has an invalid interface number: 75 but max is 0 [ 380.390215][ T25] usb 4-1: config 2 has an invalid interface number: 76 but max is 0 [ 380.404555][ T25] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 380.415127][ T25] usb 4-1: config 2 has no interface number 0 [ 380.426346][ T25] usb 4-1: config 2 has no interface number 1 [ 380.437520][ T25] usb 4-1: config 2 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 380.454996][ T25] usb 4-1: config 2 interface 75 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 380.468856][ T25] usb 4-1: config 2 interface 75 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 380.485890][ T25] usb 4-1: config 2 interface 75 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 380.505076][ T25] usb 4-1: too many endpoints for config 2 interface 76 altsetting 209: 33, using maximum allowed: 30 [ 380.519085][ T25] usb 4-1: config 2 interface 76 altsetting 209 has a duplicate endpoint with address 0x9, skipping [ 380.537628][ T25] usb 4-1: config 2 interface 76 altsetting 209 endpoint 0xF has an invalid bInterval 152, changing to 7 [ 380.584679][ T25] usb 4-1: config 2 interface 76 altsetting 209 has a duplicate endpoint with address 0x8, skipping [ 380.636931][ T25] usb 4-1: config 2 interface 76 altsetting 209 has 5 endpoint descriptors, different from the interface descriptor's value: 33 [ 380.740951][ T25] usb 4-1: config 2 interface 75 has no altsetting 0 [ 380.747690][ T25] usb 4-1: config 2 interface 76 has no altsetting 0 [ 380.795753][ T25] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice= d.89 [ 380.819463][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.820322][T11125] loop9: detected capacity change from 0 to 7 [ 380.845817][ T25] usb 4-1: Product: ࠊ [ 380.850026][ T25] usb 4-1: Manufacturer: ௔問뇎ጥ乇潧⺓ᦈﺍ쩱䳐ꡬ㢟蛥๡쩓捐㉯ാ㡱ܞ뤧㠜ಒ鹱뗃х讙艝틓ᶀ᷐䭴뀝⫦넉୾佾櫦ꮣၡ꘶ᖵ箐崼篜㿾ꈚ陻凜蒎ᕼ눖妃ﶚﳲ썚 [ 380.907477][ T25] usb 4-1: SerialNumber: ␉ [ 380.919927][T11125] Dev loop9: unable to read RDB block 7 [ 380.966020][T11125] loop9: unable to read partition table [ 380.985348][T11125] loop9: partition table beyond EOD, truncated [ 380.993220][T11125] loop_reread_partitions: partition scan of loop9 (被xڬݡ [ 380.993220][T11125] ) failed (rc=-5) [ 381.268042][T11143] Cannot find add_set index 0 as target [ 381.276592][T11145] Cannot find add_set index 0 as target [ 381.529976][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 381.556807][T11109] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 381.620458][T11109] loop2: detected capacity change from 0 to 7 [ 381.641448][ T5286] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 381.652121][T11109] Dev loop2: unable to read RDB block 7 [ 381.659536][T11109] loop2: AHDI p1 p3 p4 [ 381.664146][T11109] loop2: partition table partially beyond EOD, truncated [ 381.693745][T11109] loop2: p1 start 2048 is beyond EOD, truncated [ 381.700341][T11109] loop2: p3 size 16779293 extends beyond EOD, truncated [ 381.790977][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 381.799375][ T5286] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.810113][ T5286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 381.823027][ T5286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 381.834040][ T5286] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.848404][ T5286] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.869833][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.150205][ T4682] Dev loop2: unable to read RDB block 7 [ 382.170242][ T5286] usb 5-1: usb_control_msg returned -71 [ 382.185660][ T4682] loop2: AHDI p1 p3 p4 [ 382.188468][ T5286] usbtmc 5-1:16.0: can't read capabilities [ 382.206776][ T4682] loop2: partition table partially beyond EOD, truncated [ 382.225955][ T4682] loop2: p1 start 2048 is beyond EOD, truncated [ 382.233878][ T4682] loop2: p3 size 16779293 extends beyond EOD, truncated [ 382.316574][ T5286] usb 5-1: USB disconnect, device number 70 [ 382.532876][T11158] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 382.964929][ T25] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 383.028959][ T25] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 383.042330][ T25] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 383.131008][T11164] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 383.486503][T11177] loop9: detected capacity change from 0 to 7 [ 383.513268][T11177] Dev loop9: unable to read RDB block 7 [ 383.519025][T11177] loop9: unable to read partition table [ 383.529542][T11177] loop9: partition table beyond EOD, truncated [ 383.537699][T11177] loop_reread_partitions: partition scan of loop9 (被xڬݡ [ 383.537699][T11177] ) failed (rc=-5) [ 383.956808][T11191] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 383.967436][ T46] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 384.162192][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 384.170001][ T46] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 384.180050][ T46] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 384.187043][T11195] input: syz1 as /devices/virtual/input/input45 [ 384.189209][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.195216][ T5283] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 384.206095][ T46] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 384.232615][ T46] usb 1-1: config 0 has no interface number 0 [ 384.242067][ T46] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 384.252833][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.279846][ T46] usb 1-1: Product: syz [ 384.285300][ T46] usb 1-1: Manufacturer: syz [ 384.290289][ T46] usb 1-1: SerialNumber: syz [ 384.303103][ T46] usb 1-1: config 0 descriptor?? [ 384.403969][ T5283] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 384.419793][ T5283] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 384.436691][ T5283] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 384.451684][ T5283] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 384.472307][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.484996][T11190] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 384.498173][ T5283] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 384.517638][ T5286] usb 1-1: USB disconnect, device number 81 [ 384.711230][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.725229][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.982947][ T5286] usb 3-1: USB disconnect, device number 59 [ 385.190701][T11217] loop9: detected capacity change from 0 to 7 [ 385.204181][T11217] Dev loop9: unable to read RDB block 7 [ 385.214827][T11217] loop9: unable to read partition table [ 385.234246][T11217] loop9: partition table beyond EOD, truncated [ 385.246433][T11217] loop_reread_partitions: partition scan of loop9 (被xڬݡ [ 385.246433][T11217] ) failed (rc=-5) [ 385.791121][ T5286] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 385.874046][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.931083][ T5286] usb 5-1: device descriptor read/64, error -71 [ 386.034610][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.049174][T11234] ALSA: seq fatal error: cannot create timer (-22) [ 386.156457][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.171168][ T5286] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 386.225374][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.236398][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.245367][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.257607][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.270696][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.285535][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.320963][ T5286] usb 5-1: device descriptor read/64, error -71 [ 386.362007][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.431377][ T5286] usb usb5-port1: attempt power cycle [ 386.450965][ T5283] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 386.592054][ T35] bridge_slave_1: left allmulticast mode [ 386.612196][ T35] bridge_slave_1: left promiscuous mode [ 386.627932][ T5283] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 386.638305][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.660630][ T5283] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 2015, setting to 1024 [ 386.668218][T11244] loop9: detected capacity change from 0 to 7 [ 386.681882][T11244] Dev loop9: unable to read RDB block 7 [ 386.687931][T11244] loop9: unable to read partition table [ 386.689865][ T5283] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 386.704723][ T35] bridge_slave_0: left allmulticast mode [ 386.714609][T11244] loop9: partition table beyond EOD, truncated [ 386.716752][ T35] bridge_slave_0: left promiscuous mode [ 386.727112][T11244] loop_reread_partitions: partition scan of loop9 (被xڬݡ [ 386.727112][T11244] ) failed (rc=-5) [ 386.740271][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.754539][ T5283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.769475][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.780927][ T5286] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 386.789836][ T5283] usb 2-1: Product: syz [ 386.800357][ T5283] usb 2-1: Manufacturer: syz [ 386.805799][ T5283] usb 2-1: SerialNumber: syz [ 386.852017][ T5286] usb 5-1: device descriptor read/8, error -71 [ 387.111193][ T5286] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 387.151557][ T5286] usb 5-1: device descriptor read/8, error -71 [ 387.184923][ T35] gretap0 (unregistering): left allmulticast mode [ 387.284037][ T5286] usb usb5-port1: unable to enumerate USB device [ 387.395596][T11253] netlink: 'syz.2.1618': attribute type 9 has an invalid length. [ 387.407642][T11253] netlink: 'syz.2.1618': attribute type 6 has an invalid length. [ 387.417973][T11253] netlink: 'syz.2.1618': attribute type 7 has an invalid length. [ 387.436361][T11253] netlink: 'syz.2.1618': attribute type 8 has an invalid length. [ 387.623667][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.638923][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.652442][ T35] bond0 (unregistering): Released all slaves [ 387.666455][ T35] bond1 (unregistering): Released all slaves [ 387.808364][ T35] IPVS: stopping master sync thread 9880 ... [ 388.231417][ T5283] cdc_ncm 2-1:1.0: bind() failure [ 388.260719][ T5283] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 388.274056][T11239] chnl_net:caif_netlink_parms(): no params data found [ 388.286183][ T5283] cdc_ncm 2-1:1.1: bind() failure [ 388.327471][ T5283] usb 2-1: USB disconnect, device number 88 [ 388.372362][ T5244] Bluetooth: hci3: command tx timeout [ 388.469324][ T35] hsr_slave_0: left promiscuous mode [ 388.475956][ T35] hsr_slave_1: left promiscuous mode [ 388.483433][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.491065][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.499300][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.508088][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.599557][ T35] veth1_macvtap: left promiscuous mode [ 388.613779][ T35] veth0_macvtap: left promiscuous mode [ 388.619758][ T35] veth1_vlan: left allmulticast mode [ 388.626068][ T35] veth1_vlan: left promiscuous mode [ 388.631843][ T35] veth0_vlan: left promiscuous mode [ 388.830992][ T35] pim6reg (unregistering): left allmulticast mode [ 388.915457][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.943778][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.953925][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.977073][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.985420][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 388.995140][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.030974][ T5286] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 389.049166][ T35] macvlan0 (unregistering): left allmulticast mode [ 389.191021][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 389.207785][ T5286] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 389.223114][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.244868][ T5286] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.271528][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.303219][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.336927][ T5286] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 389.351355][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.379538][ T5286] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.401014][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.431269][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.452126][ T5286] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 389.461178][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 389.490938][ T5286] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.520984][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.540892][ T5286] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.657331][ T35] team0 (unregistering): Port device team_slave_1 removed [ 389.762511][ T35] team0 (unregistering): Port device team_slave_0 removed [ 389.845373][ T5286] usb 5-1: string descriptor 0 read error: -22 [ 389.851850][ T5286] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 389.861065][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.904248][ T5286] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 390.405232][T11288] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 390.441013][ T5235] Bluetooth: hci3: command tx timeout [ 390.542035][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.549946][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.557845][T11239] bridge_slave_0: entered allmulticast mode [ 390.565188][T11239] bridge_slave_0: entered promiscuous mode [ 390.576262][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.584388][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.591865][T11239] bridge_slave_1: entered allmulticast mode [ 390.599840][T11239] bridge_slave_1: entered promiscuous mode [ 390.677079][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.693761][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.760742][T11239] team0: Port device team_slave_0 added [ 390.787478][T11239] team0: Port device team_slave_1 added [ 390.853465][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.860569][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.886550][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.893741][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.924646][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.940460][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.012615][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.084612][T11239] hsr_slave_0: entered promiscuous mode [ 391.088902][ T5235] Bluetooth: hci1: command tx timeout [ 391.101181][T11239] hsr_slave_1: entered promiscuous mode [ 391.119367][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.127403][T11239] Cannot create hsr debugfs directory [ 391.168951][T11285] chnl_net:caif_netlink_parms(): no params data found [ 391.306751][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.478205][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.605812][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.715492][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.738595][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.747400][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.754841][T11285] bridge_slave_0: entered allmulticast mode [ 391.762703][T11285] bridge_slave_0: entered promiscuous mode [ 391.853194][T11285] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.868804][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.877013][T11285] bridge_slave_1: entered allmulticast mode [ 391.892165][T11285] bridge_slave_1: entered promiscuous mode [ 391.998033][T11285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.029694][T11285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.123573][T11285] team0: Port device team_slave_0 added [ 392.159848][T11285] team0: Port device team_slave_1 added [ 392.257698][T11285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.267399][T11285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.302163][T11285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.361574][T11285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.397510][T11285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.433794][T11285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.452629][ T5301] usb 5-1: USB disconnect, device number 75 [ 392.504962][ T35] bridge_slave_1: left allmulticast mode [ 392.513899][ T35] bridge_slave_1: left promiscuous mode [ 392.519713][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.527358][ T5235] Bluetooth: hci3: command tx timeout [ 392.546550][ T35] bridge_slave_0: left allmulticast mode [ 392.552535][ T35] bridge_slave_0: left promiscuous mode [ 392.558316][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.780299][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.795029][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.812691][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.831990][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.840165][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.848291][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.167995][ T5235] Bluetooth: hci1: command tx timeout [ 393.238624][ T35] gretap0 (unregistering): left allmulticast mode [ 393.245448][T11337] ALSA: seq fatal error: cannot create timer (-22) [ 393.565880][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.580492][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.592345][ T35] bond0 (unregistering): Released all slaves [ 393.676552][T11239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.690604][T11239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.701170][ T35] ɶƣ0G0w: left promiscuous mode [ 393.732490][T11285] hsr_slave_0: entered promiscuous mode [ 393.739121][T11285] hsr_slave_1: entered promiscuous mode [ 393.745668][T11285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.754351][T11285] Cannot create hsr debugfs directory [ 393.784222][T11239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.812892][T11239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.124995][ T35] hsr_slave_0: left promiscuous mode [ 394.141950][ T35] hsr_slave_1: left promiscuous mode [ 394.148211][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.162373][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.189962][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.209367][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.296628][ T35] veth1_macvtap: left promiscuous mode [ 394.305303][ T35] veth0_macvtap: left promiscuous mode [ 394.315396][ T35] veth1_vlan: left promiscuous mode [ 394.321346][ T35] veth0_vlan: left promiscuous mode [ 394.436808][ T35] team0 (unregistering): Port device macvlan2 removed [ 394.601424][ T5235] Bluetooth: hci3: command tx timeout [ 394.913695][ T35] team0 (unregistering): Port device team_slave_1 removed [ 394.934380][ T5235] Bluetooth: hci0: command tx timeout [ 394.980494][ T35] team0 (unregistering): Port device team_slave_0 removed [ 395.242448][ T5235] Bluetooth: hci1: command tx timeout [ 395.591042][ T5286] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 395.767898][ T5286] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 395.809992][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.853470][ T5286] usb 5-1: config 0 descriptor?? [ 395.870657][ T5286] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 395.996556][T11329] chnl_net:caif_netlink_parms(): no params data found [ 396.108235][T11360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.123108][T11360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.206835][T11329] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.220978][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.228244][T11329] bridge_slave_0: entered allmulticast mode [ 396.246585][T11329] bridge_slave_0: entered promiscuous mode [ 396.257328][T11329] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.264808][T11329] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.274413][T11329] bridge_slave_1: entered allmulticast mode [ 396.285258][T11329] bridge_slave_1: entered promiscuous mode [ 396.339811][T11329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.371370][ T9] usb 5-1: USB disconnect, device number 76 [ 396.396665][T11239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.434398][T11329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.527244][T11239] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.588613][T11329] team0: Port device team_slave_0 added [ 396.631844][T11329] team0: Port device team_slave_1 added [ 396.650636][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.657857][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.831207][T11329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.838233][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.876744][T11329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.894054][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.901269][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.014225][ T5235] Bluetooth: hci0: command tx timeout [ 397.170372][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.229810][T11329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.259804][T11329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.321523][ T5235] Bluetooth: hci1: command tx timeout [ 397.345339][T11329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.509596][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.547000][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.564535][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.573253][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.596249][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 397.604471][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.604539][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.809825][T11285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.822243][T11285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.888567][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.981632][T11285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.014209][T11285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.062665][T11329] hsr_slave_0: entered promiscuous mode [ 398.081345][T11329] hsr_slave_1: entered promiscuous mode [ 398.184592][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.256705][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.808774][T11329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.006215][T11329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.076065][T11239] veth0_vlan: entered promiscuous mode [ 399.092538][ T5244] Bluetooth: hci0: command tx timeout [ 399.257478][T11329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.363454][T11239] veth1_vlan: entered promiscuous mode [ 399.400117][T11329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.515461][T11285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.550135][T11403] chnl_net:caif_netlink_parms(): no params data found [ 399.607956][ T35] bridge_slave_1: left allmulticast mode [ 399.651187][ T35] bridge_slave_1: left promiscuous mode [ 399.671524][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.693453][ T35] bridge_slave_0: left allmulticast mode [ 399.699220][ T35] bridge_slave_0: left promiscuous mode [ 399.710364][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.729060][ T5244] Bluetooth: hci2: command tx timeout [ 399.744546][ T35] bridge_slave_1: left allmulticast mode [ 399.750352][ T35] bridge_slave_1: left promiscuous mode [ 399.756694][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.766510][ T35] bridge_slave_0: left allmulticast mode [ 399.773669][ T35] bridge_slave_0: left promiscuous mode [ 399.779520][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.898729][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.910441][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.922427][ T35] bond0 (unregistering): Released all slaves [ 401.063274][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.075568][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.087783][ T35] bond0 (unregistering): Released all slaves [ 401.101039][ T35] bond1 (unregistering): Released all slaves [ 401.161946][ T5244] Bluetooth: hci0: command tx timeout [ 401.187454][T11239] veth0_macvtap: entered promiscuous mode [ 401.307543][T11285] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.389161][T11239] veth1_macvtap: entered promiscuous mode [ 401.410577][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.417804][ T2564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.519778][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.526981][ T2564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.583711][T11403] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.601347][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.608662][T11403] bridge_slave_0: entered allmulticast mode [ 401.616187][T11403] bridge_slave_0: entered promiscuous mode [ 401.678184][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.695152][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.715021][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.736487][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.749066][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.770047][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.782661][T11239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.806854][T11403] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.809443][ T5244] Bluetooth: hci2: command tx timeout [ 401.814211][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.814493][T11403] bridge_slave_1: entered allmulticast mode [ 401.858948][T11403] bridge_slave_1: entered promiscuous mode [ 401.886558][T11329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.920743][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.920905][ T5286] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 401.961241][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.972823][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.983614][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.993595][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.004616][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.017016][T11239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.088009][T11329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.099819][T11329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.126009][T11239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.136056][ T5286] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 402.144030][T11239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.144073][T11239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.144107][T11239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.186393][T11329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.197325][ T5286] usb 5-1: config index 0 descriptor too short (expected 94, got 72) [ 402.215768][ T5286] usb 5-1: config index 1 descriptor too short (expected 94, got 72) [ 402.226549][ T5286] usb 5-1: config index 2 descriptor too short (expected 94, got 72) [ 402.230418][T11403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.247476][ T5286] usb 5-1: config index 3 descriptor too short (expected 94, got 72) [ 402.273191][ T5286] usb 5-1: config index 4 descriptor too short (expected 94, got 72) [ 402.282524][T11285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.295305][ T5286] usb 5-1: config index 5 descriptor too short (expected 94, got 72) [ 402.308326][T11285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.309442][ T5286] usb 5-1: config index 6 descriptor too short (expected 94, got 72) [ 402.343587][T11403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.368492][ T5286] usb 5-1: config index 7 descriptor too short (expected 94, got 72) [ 402.442921][T11460] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 402.460068][T11460] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1649'. [ 402.584421][T11403] team0: Port device team_slave_0 added [ 402.662319][ T35] hsr_slave_0: left promiscuous mode [ 402.679296][ T35] hsr_slave_1: left promiscuous mode [ 402.688856][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.708229][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.729280][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.738156][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.763973][ T35] hsr_slave_0: left promiscuous mode [ 402.777796][ T35] hsr_slave_1: left promiscuous mode [ 402.790188][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.799663][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.821905][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.825025][ T5286] usb 5-1: string descriptor 0 read error: -71 [ 402.829440][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.850029][ T5286] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 402.861195][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.879861][ T5286] usb 5-1: can't set config #1, error -71 [ 402.895828][ T5286] usb 5-1: USB disconnect, device number 77 [ 402.920001][ T35] veth1_macvtap: left promiscuous mode [ 402.926429][ T35] veth0_macvtap: left promiscuous mode [ 402.937867][ T35] veth1_vlan: left promiscuous mode [ 402.943357][ T35] veth0_vlan: left promiscuous mode [ 402.949708][ T35] veth1_macvtap: left promiscuous mode [ 402.955463][ T35] veth0_macvtap: left promiscuous mode [ 403.647553][ T35] team0 (unregistering): Port device team_slave_1 removed [ 403.697824][ T35] team0 (unregistering): Port device team_slave_0 removed [ 403.884780][ T5244] Bluetooth: hci2: command tx timeout [ 404.594102][ T35] team0 (unregistering): Port device team_slave_1 removed [ 404.649423][ T35] team0 (unregistering): Port device team_slave_0 removed [ 405.177072][T11403] team0: Port device team_slave_1 added [ 405.249892][T11403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.258141][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.284885][T11403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.315970][T11285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.334672][T11403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.349717][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.377680][T11403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.478915][T11403] hsr_slave_0: entered promiscuous mode [ 405.496893][T11403] hsr_slave_1: entered promiscuous mode [ 405.519281][T11403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.537759][T11403] Cannot create hsr debugfs directory [ 405.593882][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.623402][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.770140][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.785950][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.896196][T11285] veth0_vlan: entered promiscuous mode [ 405.962210][ T5244] Bluetooth: hci2: command tx timeout [ 406.047596][T11329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.073716][T11285] veth1_vlan: entered promiscuous mode [ 406.168001][T11329] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.252728][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.260020][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.287356][T11285] veth0_macvtap: entered promiscuous mode [ 406.378727][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.386026][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.397522][T11285] veth1_macvtap: entered promiscuous mode [ 406.460849][ T29] audit: type=1326 audit(1727064268.458:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.0.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a70f7def9 code=0x0 [ 406.489222][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.510889][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.530856][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.545948][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.566763][T11285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.697254][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.725819][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.756479][T11285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.786556][T11285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.838723][T11285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.866425][T11285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.890659][T11285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.900923][T11285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.910106][T11285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.090061][T11329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.238349][ T1066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.423907][ T1066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.568224][ T1066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.634005][T11403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.758921][ T1066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.809585][T11329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.862829][T11403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.881130][T11403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.904666][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.912840][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.928309][T11403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.061089][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.074111][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.094255][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.104557][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.113569][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 408.123312][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.227556][T11329] veth0_vlan: entered promiscuous mode [ 408.251555][ T1066] bridge_slave_1: left allmulticast mode [ 408.257291][ T1066] bridge_slave_1: left promiscuous mode [ 408.269732][ T1066] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.280526][ T1066] bridge_slave_0: left allmulticast mode [ 408.294681][ T1066] bridge_slave_0: left promiscuous mode [ 408.300539][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.617558][ T1066] gretap0 (unregistering): left allmulticast mode [ 408.830280][ T1066] team0: Port device bridge0 removed [ 409.155469][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.166297][ T1066] bond_slave_0: left promiscuous mode [ 409.176154][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.186219][ T1066] bond_slave_1: left promiscuous mode [ 409.196124][ T1066] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 409.210075][ T1066] macvlan3: left promiscuous mode [ 409.217870][ T1066] team0: left promiscuous mode [ 409.225427][ T1066] vlan0: left promiscuous mode [ 409.234391][ T1066] team_slave_0: left promiscuous mode [ 409.240399][ T1066] team_slave_1: left promiscuous mode [ 409.249546][ T1066] bond0 (unregistering): Released all slaves [ 409.264980][ T1066] bond1 (unregistering): Released all slaves [ 409.278558][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.287073][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.419189][T11329] veth1_vlan: entered promiscuous mode [ 409.434552][ T1066] IPVS: stopping master sync thread 11288 ... [ 409.597429][T11403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.629793][T11403] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.676551][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.683817][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.780874][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.788070][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.879678][ T1066] hsr_slave_0: left promiscuous mode [ 409.894449][ T1066] hsr_slave_1: left promiscuous mode [ 409.907445][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.916419][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.929455][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.938340][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.977832][ T1066] veth1_macvtap: left promiscuous mode [ 409.989079][ T1066] veth0_macvtap: left promiscuous mode [ 409.996542][ T1066] veth1_vlan: left promiscuous mode [ 410.002525][ T1066] veth0_vlan: left allmulticast mode [ 410.007882][ T1066] veth0_vlan: left promiscuous mode [ 410.201318][ T5244] Bluetooth: hci4: command tx timeout [ 410.390685][T11589] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 410.421871][ T1066] team0 (unregistering): Port device vlan0 removed [ 410.659306][T11593] Cannot find add_set index 2 as target [ 410.839311][ T1066] team0 (unregistering): Port device team_slave_1 removed [ 410.898574][ T1066] team0 (unregistering): Port device team_slave_0 removed [ 411.613116][T11329] veth0_macvtap: entered promiscuous mode [ 411.673963][T11599] syz.2.1664 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 411.700509][T11329] veth1_macvtap: entered promiscuous mode [ 411.847108][T11535] chnl_net:caif_netlink_parms(): no params data found [ 411.891286][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.902843][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.915857][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.930963][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.955297][T11329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.031251][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.051639][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.066777][T11329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.078804][T11329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.095352][T11329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.116210][T11403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.167748][T11329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.180687][T11329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.199136][T11329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.218117][T11329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.254349][T11535] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.261914][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.272612][T11535] bridge_slave_0: entered allmulticast mode [ 412.279805][T11535] bridge_slave_0: entered promiscuous mode [ 412.291435][ T5244] Bluetooth: hci4: command tx timeout [ 412.338231][T11535] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.347480][T11535] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.355122][T11535] bridge_slave_1: entered allmulticast mode [ 412.364987][T11535] bridge_slave_1: entered promiscuous mode [ 412.427112][T11535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.443327][T11535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.513993][T11535] team0: Port device team_slave_0 added [ 412.527598][T11535] team0: Port device team_slave_1 added [ 412.611963][T11535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.619870][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.666397][T11535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.684427][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.700608][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.735150][T11535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.745305][T11535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.771586][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.789865][T11535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.835683][T11403] veth0_vlan: entered promiscuous mode [ 412.947778][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.960022][T11535] hsr_slave_0: entered promiscuous mode [ 412.970862][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.980648][T11535] hsr_slave_1: entered promiscuous mode [ 412.991977][T11535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.999702][T11535] Cannot create hsr debugfs directory [ 413.070663][T11403] veth1_vlan: entered promiscuous mode [ 413.312399][ T1066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.456723][T11403] veth0_macvtap: entered promiscuous mode [ 413.477893][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.488790][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.514950][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.534135][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.546222][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.556089][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.607101][ T1066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.633740][T11403] veth1_macvtap: entered promiscuous mode [ 413.722098][ T1066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.843001][ T1066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.949831][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.968420][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.980044][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.997079][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.007545][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.024539][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.039549][T11403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.089537][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.111834][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.130552][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.144018][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.155884][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.166923][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.190604][T11403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.277913][T11403] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.293369][T11403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.304663][T11403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.313665][T11403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.368484][ T5235] Bluetooth: hci4: command tx timeout [ 414.444176][ T1066] bridge_slave_1: left allmulticast mode [ 414.454698][ T1066] bridge_slave_1: left promiscuous mode [ 414.461642][ T1066] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.471585][ T1066] bridge_slave_0: left allmulticast mode [ 414.477289][ T1066] bridge_slave_0: left promiscuous mode [ 414.483341][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.776588][T11656] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 415.041521][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.061300][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.074402][ T1066] bond0 (unregistering): Released all slaves [ 415.434517][ T2564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.453395][ T2564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.494084][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.520663][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.528512][ T1066] hsr_slave_0: left promiscuous mode [ 415.543489][ T1066] hsr_slave_1: left promiscuous mode [ 415.565928][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.573729][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.588282][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.596658][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.635856][ T1066] veth1_macvtap: left promiscuous mode [ 415.641468][ T5235] Bluetooth: hci3: command tx timeout [ 415.660563][ T1066] veth0_macvtap: left promiscuous mode [ 415.666732][ T1066] veth1_vlan: left promiscuous mode [ 415.672579][ T1066] veth0_vlan: left promiscuous mode [ 416.216970][ T1066] team0 (unregistering): Port device team_slave_1 removed [ 416.268208][ T1066] team0 (unregistering): Port device team_slave_0 removed [ 416.449173][ T5235] Bluetooth: hci4: command tx timeout [ 416.809163][T11639] chnl_net:caif_netlink_parms(): no params data found [ 416.953272][T11535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.976837][T11535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.986931][T11535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.073589][T11535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.364882][T11639] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.374021][T11639] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.386416][T11639] bridge_slave_0: entered allmulticast mode [ 417.394597][T11639] bridge_slave_0: entered promiscuous mode [ 417.442488][T11639] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.449756][T11639] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.473331][T11639] bridge_slave_1: entered allmulticast mode [ 417.480496][T11639] bridge_slave_1: entered promiscuous mode [ 417.655708][T11639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.692058][T11692] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 417.712256][T11639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.722630][ T5235] Bluetooth: hci3: command tx timeout [ 417.741614][T11692] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1677'. [ 417.840287][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 417.852408][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 417.862038][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 417.878565][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 417.890515][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 417.903649][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 417.918778][T11639] team0: Port device team_slave_0 added [ 417.953426][T11639] team0: Port device team_slave_1 added [ 418.084030][T11639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.092405][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.119901][T11639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.209089][ T1066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.261039][T11639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.268084][T11639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.294093][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.305881][T11639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.334054][T11535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.374950][T11702] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 418.388846][ T1066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.508514][ T1066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.555911][T11639] hsr_slave_0: entered promiscuous mode [ 418.578143][T11639] hsr_slave_1: entered promiscuous mode [ 418.587177][T11639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.595348][T11639] Cannot create hsr debugfs directory [ 418.629424][T11535] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.690392][ T1066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.776441][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.783654][ T2564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.799932][ T2564] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.807128][ T2564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.203215][T11698] chnl_net:caif_netlink_parms(): no params data found [ 419.263276][ T1066] bridge_slave_1: left allmulticast mode [ 419.274970][ T1066] bridge_slave_1: left promiscuous mode [ 419.298804][ T1066] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.323279][ T1066] bridge_slave_0: left allmulticast mode [ 419.339260][ T1066] bridge_slave_0: left promiscuous mode [ 419.355935][ T1066] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.802042][ T5235] Bluetooth: hci3: command tx timeout [ 419.957201][ T1066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.961282][ T5235] Bluetooth: hci1: command tx timeout [ 419.976988][ T1066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.992279][ T1066] bond0 (unregistering): Released all slaves [ 420.095747][T11535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.290093][T11698] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.298072][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.306190][T11698] bridge_slave_0: entered allmulticast mode [ 420.313959][T11698] bridge_slave_0: entered promiscuous mode [ 420.353410][T11698] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.362284][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.369734][T11698] bridge_slave_1: entered allmulticast mode [ 420.378019][T11698] bridge_slave_1: entered promiscuous mode [ 420.424374][ T1066] hsr_slave_0: left promiscuous mode [ 420.434402][ T1066] hsr_slave_1: left promiscuous mode [ 420.449203][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.467903][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.475997][ T1066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.484679][ T1066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.503732][ T1066] veth1_macvtap: left promiscuous mode [ 420.509273][ T1066] veth0_macvtap: left promiscuous mode [ 420.515213][ T1066] veth1_vlan: left promiscuous mode [ 420.520528][ T1066] veth0_vlan: left promiscuous mode [ 421.027129][ T1066] team0 (unregistering): Port device team_slave_1 removed [ 421.074814][ T1066] team0 (unregistering): Port device team_slave_0 removed [ 421.499689][T11698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.540133][T11698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.583384][T11535] veth0_vlan: entered promiscuous mode [ 421.670484][T11698] team0: Port device team_slave_0 added [ 421.683943][T11698] team0: Port device team_slave_1 added [ 421.707864][T11535] veth1_vlan: entered promiscuous mode [ 421.783493][T11698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.790503][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.816698][T11698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.828942][T11639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.850335][T11698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.857686][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.884276][ T5235] Bluetooth: hci3: command tx timeout [ 421.896132][T11698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.915370][T11639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.925408][T11639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 421.935895][T11639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 421.995138][T11698] hsr_slave_0: entered promiscuous mode [ 422.002762][T11698] hsr_slave_1: entered promiscuous mode [ 422.008986][T11698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.018238][T11698] Cannot create hsr debugfs directory [ 422.041134][ T5235] Bluetooth: hci1: command tx timeout [ 422.070598][T11535] veth0_macvtap: entered promiscuous mode [ 422.179197][T11535] veth1_macvtap: entered promiscuous mode [ 422.236196][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.255270][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.267012][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.283744][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.301722][T11535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.327570][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.346891][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.360180][T11535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.390969][T11535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.422626][T11535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.506303][T11535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.540822][T11535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.561660][T11535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.570452][T11535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.636927][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 422.786524][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.805066][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 422.881099][ T1187] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 422.920220][T11639] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.011917][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.019147][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.032423][ T1187] usb 2-1: device descriptor read/64, error -71 [ 423.065245][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.072481][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.128906][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.169816][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.333468][ T1187] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 423.353621][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.362342][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.471419][ T1187] usb 2-1: device descriptor read/64, error -71 [ 423.497159][T11698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 423.549082][T11698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.567374][T11698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 423.591873][ T1187] usb usb2-port1: attempt power cycle [ 423.620029][T11698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 423.660421][T11639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.861082][T11639] veth0_vlan: entered promiscuous mode [ 423.923953][T11639] veth1_vlan: entered promiscuous mode [ 423.972627][ T1187] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 424.031142][ T1187] usb 2-1: device descriptor read/8, error -71 [ 424.040229][T11698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.087712][T11639] veth0_macvtap: entered promiscuous mode [ 424.121428][ T5235] Bluetooth: hci1: command tx timeout [ 424.129738][T11639] veth1_macvtap: entered promiscuous mode [ 424.179868][T11698] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.270134][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.277387][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.294194][ T1187] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 424.312493][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.319797][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.358409][ T1187] usb 2-1: device descriptor read/8, error -71 [ 424.455531][T11639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.482387][ T1187] usb usb2-port1: unable to enumerate USB device [ 424.491101][T11639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.522697][T11639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.546094][T11639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.564001][T11639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.578166][T11639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.602356][T11639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.707703][T11698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.747847][T11698] veth0_vlan: entered promiscuous mode [ 424.761063][T11698] veth1_vlan: entered promiscuous mode [ 424.813639][T11639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.830311][T11639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.840333][T11639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.851095][T11639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.861002][T11639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.871544][T11639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.883044][T11639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.893957][T11639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.903515][T11639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.912710][T11639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.922233][T11639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.008355][T11698] veth0_macvtap: entered promiscuous mode [ 425.019567][T11698] veth1_macvtap: entered promiscuous mode [ 425.036860][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.047564][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.057484][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.068279][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.078242][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.089017][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.099232][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.110047][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.122032][T11698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.162196][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.191055][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.201278][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.212175][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.222527][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.233065][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.243273][T11698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.253890][T11698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.265399][T11698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.277227][T11698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.286078][T11698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.294911][T11698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.303709][T11698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.431426][ T5295] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 425.508756][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.546263][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.581368][ T5295] usb 5-1: device descriptor read/64, error -71 [ 425.658561][ T2564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.693794][ T2564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.739511][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.749662][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.769131][ T8225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.777169][ T8225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.910975][ T5295] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 426.301576][ T5235] Bluetooth: hci1: command tx timeout [ 426.340911][ T5295] usb 5-1: device descriptor read/64, error -71 [ 426.570973][ T5295] usb usb5-port1: attempt power cycle [ 426.597677][T11840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1694'. [ 426.785709][T11813] coredump: 14(syz.4.1691): written to core: VMAs: 35, size 97345536; core: 59945982 bytes, pos 97353728 [ 427.341165][ T5295] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 427.362990][ T5295] usb 5-1: device descriptor read/8, error -71 [ 427.611137][ T5295] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 427.631744][ T5295] usb 5-1: device descriptor read/8, error -71 [ 427.701293][ T5283] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 427.741252][ T5295] usb usb5-port1: unable to enumerate USB device [ 427.850934][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 427.857446][T11863] fuse: Unknown parameter 'euid' [ 427.866473][ T5283] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.881125][ T5283] usb 2-1: config 0 has no interfaces? [ 427.895567][ T5283] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 427.907409][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.919015][ T5283] usb 2-1: Product: syz [ 427.925835][ T5283] usb 2-1: Manufacturer: syz [ 427.930525][ T5283] usb 2-1: SerialNumber: syz [ 427.942169][ T5283] usb 2-1: config 0 descriptor?? [ 428.086214][T11868] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 428.510970][ T5283] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 428.547450][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1700'. [ 428.570974][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 428.608075][T11873] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 428.645687][T11873] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.653312][T11873] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.712638][T11873] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.721360][T11873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.728868][T11873] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.736214][T11873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.744005][ T5283] usb 1-1: Using ep0 maxpacket: 32 [ 428.754037][T11873] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 428.774944][ T5283] usb 1-1: unable to get BOS descriptor or descriptor too short [ 428.788553][ T5283] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 428.808981][ T5283] usb 1-1: config 127 has no interface number 0 [ 428.815878][ T5283] usb 1-1: config 127 interface 25 has no altsetting 0 [ 428.826021][ T5283] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 428.835213][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.843707][ T5283] usb 1-1: Product: syz [ 428.848042][ T5283] usb 1-1: Manufacturer: syz [ 428.852962][ T5283] usb 1-1: SerialNumber: syz [ 428.895433][ T5284] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 428.950953][T11880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1700'. [ 428.960066][T11880] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1700'. [ 428.980942][T11880] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1700'. [ 429.003896][T11880] bond0: entered promiscuous mode [ 429.009143][T11880] bond_slave_0: entered promiscuous mode [ 429.019613][T11880] bond_slave_1: entered promiscuous mode [ 429.070923][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 429.079065][ T5283] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 429.104038][ T5284] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 429.113701][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.127899][ T5284] usb 3-1: Product: syz [ 429.132443][ T5284] usb 3-1: Manufacturer: syz [ 429.137270][ T5284] usb 3-1: SerialNumber: syz [ 429.141044][ T5286] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 429.144448][ T5284] usb 3-1: config 0 descriptor?? [ 429.162168][ T5284] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 429.171436][ T5284] usb 3-1: Detected FT-X [ 429.301080][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 429.332856][ T5286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 429.349505][ T5286] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 429.361931][ T5284] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 429.392041][ T5284] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 429.399459][ T5284] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 429.407393][ T5286] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 429.407430][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.407454][ T5286] usb 5-1: Product: syz [ 429.407472][ T5286] usb 5-1: Manufacturer: syz [ 429.407490][ T5286] usb 5-1: SerialNumber: syz [ 429.443325][ T5286] usb 5-1: config 0 descriptor?? [ 429.449042][T11877] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 429.466973][T11877] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 429.473219][ T5284] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 429.504802][ T5284] usb 3-1: USB disconnect, device number 60 [ 429.524941][ T5284] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 429.536657][ T5284] ftdi_sio 3-1:0.0: device disconnected [ 429.789172][T11893] m: renamed from ipvlan1 [ 429.918509][ T5283] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 429.941294][ T5283] usb 1-1: USB disconnect, device number 82 [ 430.477244][ T3206] usb 2-1: USB disconnect, device number 93 [ 430.999413][T11909] loop9: detected capacity change from 0 to 7 [ 431.023525][T11909] Dev loop9: unable to read RDB block 7 [ 431.043799][T11909] loop9: unable to read partition table [ 431.065585][T11909] loop9: partition table beyond EOD, truncated [ 431.093261][T11911] loop4: detected capacity change from 0 to 7 [ 431.099714][T11911] buffer_io_error: 4 callbacks suppressed [ 431.099727][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.116652][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.125065][T11909] loop_reread_partitions: partition scan of loop9 (被xڬݡ [ 431.125065][T11909] ) failed (rc=-5) [ 431.125126][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.265382][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.282705][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.323958][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.358744][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.400935][T11911] ldm_validate_partition_table(): Disk read failed. [ 431.473143][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.501214][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.509594][T11911] Buffer I/O error on dev loop4, logical block 0, async page read [ 431.528935][T11911] Dev loop4: unable to read RDB block 0 [ 431.546392][T11911] loop4: unable to read partition table [ 431.564776][T11911] loop4: partition table beyond EOD, truncated [ 431.589629][T11911] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 431.589629][T11911] ) failed (rc=-5) [ 431.754359][T11925] binder: 11924:11925 ioctl c0306201 20000280 returned -14 [ 431.975554][ T5286] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 432.057494][ T5286] asix 5-1:0.0: probe with driver asix failed with error -71 [ 432.117456][T11932] loop4: detected capacity change from 0 to 7 [ 432.134725][ T5286] usb 5-1: USB disconnect, device number 82 [ 432.143482][T11932] ldm_validate_partition_table(): Disk read failed. [ 432.165904][T11932] Dev loop4: unable to read RDB block 0 [ 432.176678][T11934] kvm: pic: level sensitive irq not supported [ 432.176703][T11932] loop4: unable to read partition table [ 432.190904][T11932] loop4: partition table beyond EOD, truncated [ 432.201693][T11934] kvm: pic: non byte read [ 432.210398][T11932] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 432.210398][T11932] ) failed (rc=-5) [ 432.231011][ T5284] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 432.258353][T11934] dvmrp5: entered allmulticast mode [ 432.288763][T11938] dvmrp5: left allmulticast mode [ 432.398518][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 432.421671][ T5284] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 432.434598][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.449706][ T5284] usb 1-1: Product: syz [ 432.459040][ T5284] usb 1-1: Manufacturer: syz [ 432.469197][ T5284] usb 1-1: SerialNumber: syz [ 432.486449][ T5284] usb 1-1: config 0 descriptor?? [ 432.499204][ T5284] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 432.744584][T11947] vlan0: entered promiscuous mode [ 432.749998][T11947] macvlan0: entered promiscuous mode [ 432.782604][T11947] macvlan0: left promiscuous mode [ 432.911190][ T5295] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 433.061014][ T5295] usb 5-1: device descriptor read/64, error -71 [ 433.185620][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 433.199947][T11965] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1734'. [ 433.230845][T11965] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1734'. [ 433.257168][T11965] vlan0: entered allmulticast mode [ 433.271097][T11965] gretap0: entered allmulticast mode [ 433.340992][ T5295] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 433.560918][ T5295] usb 5-1: device descriptor read/64, error -71 [ 433.623090][T11969] fuse: Unknown parameter 'user_id' [ 433.639882][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'. [ 433.685131][ T5295] usb usb5-port1: attempt power cycle [ 433.837356][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1736'. [ 433.873729][T11971] vlan2: entered promiscuous mode [ 433.981386][ T29] audit: type=1326 audit(1727064295.988:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.2.1736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1704b7def9 code=0x0 [ 434.003226][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.400998][ T5295] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 434.421609][ T5295] usb 5-1: device descriptor read/8, error -71 [ 434.468021][T11979] loop4: detected capacity change from 0 to 7 [ 434.477954][T11979] ldm_validate_partition_table(): Disk read failed. [ 434.485816][T11979] Dev loop4: unable to read RDB block 0 [ 434.492339][T11979] loop4: unable to read partition table [ 434.498525][T11979] loop4: partition table beyond EOD, truncated [ 434.505741][T11979] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 434.505741][T11979] ) failed (rc=-5) [ 434.660987][ T5295] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 434.702099][ T5295] usb 5-1: device descriptor read/8, error -71 [ 434.811618][ T5295] usb usb5-port1: unable to enumerate USB device [ 434.981114][ T5284] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 435.008521][ T5295] usb 1-1: USB disconnect, device number 83 [ 435.162213][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 435.185550][ T5284] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 435.219811][ T5284] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 435.239269][ T5284] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 435.256278][ T5284] usb 2-1: config 1 has no interface number 0 [ 435.266779][ T5284] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.290100][ T5284] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 435.306600][ T5284] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 435.321882][ T5284] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 435.338799][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.378439][ T5284] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 435.585506][ T5284] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 435.592493][ T5284] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 435.600182][ T5284] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 435.751108][ T3206] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 435.788607][ T46] usb 2-1: USB disconnect, device number 94 [ 435.981068][ T5295] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 436.151728][ T5295] usb 3-1: Using ep0 maxpacket: 16 [ 436.181493][ T5295] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 436.206532][ T5295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.222081][ T5295] usb 3-1: Product: syz [ 436.227955][ T5295] usb 3-1: Manufacturer: syz [ 436.233097][ T5295] usb 3-1: SerialNumber: syz [ 436.239734][ T5295] usb 3-1: config 0 descriptor?? [ 436.248568][ T5295] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 436.462245][T12003] fuse: Bad value for 'fd' [ 436.516000][ T5295] gspca_sn9c20x: Write register 1000 failed -71 [ 436.554422][ T5295] gspca_sn9c20x: Device initialization failed [ 436.571245][ T5295] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 436.597613][ T5295] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 436.615493][ T5295] usb 3-1: USB disconnect, device number 61 [ 436.796173][T12020] FAULT_INJECTION: forcing a failure. [ 436.796173][T12020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.810413][T12020] CPU: 1 UID: 0 PID: 12020 Comm: syz.3.1753 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 436.820884][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 436.830953][T12020] Call Trace: [ 436.834483][T12020] [ 436.837417][T12020] dump_stack_lvl+0x241/0x360 [ 436.842210][T12020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.847514][T12020] ? __pfx__printk+0x10/0x10 [ 436.852114][T12020] ? __pfx_lock_release+0x10/0x10 [ 436.857185][T12020] should_fail_ex+0x3b0/0x4e0 [ 436.861880][T12020] _copy_from_user+0x2f/0xe0 [ 436.866485][T12020] get_nodes+0x265/0x4e0 [ 436.870741][T12020] ? __pfx_get_nodes+0x10/0x10 [ 436.875556][T12020] __se_sys_migrate_pages+0xc6/0x740 [ 436.880953][T12020] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 436.886892][T12020] ? do_syscall_64+0x100/0x230 [ 436.891678][T12020] ? do_syscall_64+0xb6/0x230 [ 436.896370][T12020] do_syscall_64+0xf3/0x230 [ 436.900886][T12020] ? clear_bhb_loop+0x35/0x90 [ 436.905582][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.911488][T12020] RIP: 0033:0x7f591037def9 [ 436.915915][T12020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.935532][T12020] RSP: 002b:00007f59110c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 436.943952][T12020] RAX: ffffffffffffffda RBX: 00007f5910535f80 RCX: 00007f591037def9 [ 436.952017][T12020] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000000000000 [ 436.959989][T12020] RBP: 00007f59110c6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.967972][T12020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.976137][T12020] R13: 0000000000000000 R14: 00007f5910535f80 R15: 00007f591065fa28 [ 436.984334][T12020] [ 437.840984][ T46] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 438.023418][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.060708][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 438.106539][ T46] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.137289][ T46] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.157207][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.177935][ T46] usb 2-1: Product: syz [ 438.188887][ T46] usb 2-1: Manufacturer: syz [ 438.202783][ T46] usb 2-1: SerialNumber: syz [ 438.436918][ T46] usb 2-1: cannot find UAC_HEADER [ 438.442799][ T46] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 438.465165][ T46] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 438.472891][ T46] usb 2-1: MIDIStreaming interface descriptor not found [ 438.543120][ T46] usb 2-1: USB disconnect, device number 95 [ 438.551059][T11538] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 438.587679][T12045] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073457893375) [ 438.626831][ T5234] udevd[5234]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.643701][T12045] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 438.733607][T11538] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.767205][T11538] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.792698][T11538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.808732][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.811257][T11538] usb 5-1: Product: syz [ 438.834062][T11538] usb 5-1: Manufacturer: syz [ 438.844208][T11538] usb 5-1: SerialNumber: syz [ 438.860090][T11538] cdc_ncm 5-1:1.0: skipping garbage [ 439.012500][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.146146][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.169296][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.179712][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.198482][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.200555][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.221724][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 439.231117][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.290892][ T1187] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 439.365864][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.463886][ T1187] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 439.494956][ T1187] usb 3-1: config 0 has no interface number 0 [ 439.513497][T11538] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 439.519687][T11538] cdc_ncm 5-1:1.0: bind() failure [ 439.526484][ T1187] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 439.528146][T11538] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 439.551874][ T1187] usb 3-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=a2.ae [ 439.568349][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.577117][ T1187] usb 3-1: Product: syz [ 439.582307][ T1187] usb 3-1: Manufacturer: syz [ 439.584101][T11538] cdc_ncm 5-1:1.1: bind() failure [ 439.587128][ T1187] usb 3-1: SerialNumber: syz [ 439.600277][ T1187] usb 3-1: config 0 descriptor?? [ 439.607006][T12050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 439.639779][T11538] usb 5-1: USB disconnect, device number 87 [ 439.650104][ T1187] io_ti 3-1:0.83: required endpoints missing [ 439.770187][T12056] chnl_net:caif_netlink_parms(): no params data found [ 439.793813][ T52] bridge_slave_1: left allmulticast mode [ 439.799908][ T52] bridge_slave_1: left promiscuous mode [ 439.806278][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.827429][ T52] bridge_slave_0: left allmulticast mode [ 439.834121][ T52] bridge_slave_0: left promiscuous mode [ 439.846715][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.857980][ T46] usb 3-1: USB disconnect, device number 62 [ 440.282587][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.289258][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.030501][T12099] loop9: detected capacity change from 0 to 7 [ 441.041132][T12099] Dev loop9: unable to read RDB block 7 [ 441.049471][T12099] loop9: unable to read partition table [ 441.074960][T12099] loop9: partition table beyond EOD, truncated [ 441.081598][T12099] loop_reread_partitions: partition scan of loop9 (被xڬݡ [ 441.081598][T12099] ) failed (rc=-5) [ 441.105546][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.115002][ T46] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 441.158022][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.182201][ T52] bond0 (unregistering): Released all slaves [ 441.276096][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 441.318799][ T46] usb 3-1: config 7 has an invalid interface number: 75 but max is 0 [ 441.330967][ T5244] Bluetooth: hci3: command tx timeout [ 441.355917][ T46] usb 3-1: config 7 has no interface number 0 [ 441.362260][ T46] usb 3-1: config 7 interface 75 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 441.374412][ T46] usb 3-1: config 7 interface 75 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 441.384539][ T46] usb 3-1: config 7 interface 75 has no altsetting 0 [ 441.396533][ T46] usb 3-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=17.a0 [ 441.406804][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.415344][ T46] usb 3-1: Product: syz [ 441.419858][ T46] usb 3-1: Manufacturer: syz [ 441.427280][ T46] usb 3-1: SerialNumber: syz [ 441.673856][T12056] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.686765][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.710510][T12056] bridge_slave_0: entered allmulticast mode [ 441.730386][T12056] bridge_slave_0: entered promiscuous mode [ 441.761001][ T3206] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 441.859425][T12056] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.889239][T12056] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.915147][ T3206] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.937617][T12056] bridge_slave_1: entered allmulticast mode [ 441.956715][T12056] bridge_slave_1: entered promiscuous mode [ 441.989305][ T3206] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.040640][ T3206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.059536][ T3206] usb 2-1: Product: syz [ 442.071250][ T3206] usb 2-1: Manufacturer: syz [ 442.087417][ T3206] usb 2-1: SerialNumber: syz [ 442.116004][ T3206] cdc_ncm 2-1:1.0: skipping garbage [ 442.142737][ T52] hsr_slave_0: left promiscuous mode [ 442.175648][ T52] hsr_slave_1: left promiscuous mode [ 442.218052][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.240720][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.295040][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.314190][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.418968][ T52] veth1_macvtap: left promiscuous mode [ 442.448042][ T52] veth0_macvtap: left promiscuous mode [ 442.471037][ T52] veth1_vlan: left promiscuous mode [ 442.485157][ T52] veth0_vlan: left promiscuous mode [ 442.774417][ T3206] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 442.800565][ T3206] cdc_ncm 2-1:1.0: bind() failure [ 442.826598][ T3206] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 442.838482][ T3206] cdc_ncm 2-1:1.1: bind() failure [ 442.892751][ T3206] usb 2-1: USB disconnect, device number 96 [ 443.099662][T12128] loop4: detected capacity change from 0 to 7 [ 443.128353][T12128] buffer_io_error: 32 callbacks suppressed [ 443.128512][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.163097][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.180363][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.193311][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.244037][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.268738][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.277914][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.286257][T12128] ldm_validate_partition_table(): Disk read failed. [ 443.293502][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.302241][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.310501][T12128] Buffer I/O error on dev loop4, logical block 0, async page read [ 443.331390][T12128] Dev loop4: unable to read RDB block 0 [ 443.350306][T12128] loop4: unable to read partition table [ 443.364370][T12128] loop4: partition table beyond EOD, truncated [ 443.378366][T12128] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 443.378366][T12128] ) failed (rc=-5) [ 443.401304][ T5244] Bluetooth: hci3: command tx timeout [ 443.666061][T12135] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 443.789364][T12142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'. [ 443.819952][ T46] em28xx 3-1:7.75: New device syz syz @ 480 Mbps (3275:0085, interface 75, class 75) [ 443.876168][ T46] em28xx 3-1:7.75: Video interface 75 found: isoc [ 443.987309][ T46] em28xx 3-1:7.75: unknown em28xx chip ID (0) [ 444.083766][ T46] em28xx 3-1:7.75: reading from i2c device at 0xa0 failed (error=-5) [ 444.093530][ T46] em28xx 3-1:7.75: board has no eeprom [ 444.173632][ T46] em28xx 3-1:7.75: Identified as PLEX PX-BCUD (card=98) [ 444.200097][ T46] em28xx 3-1:7.75: Currently, V4L2 is not supported on this model [ 444.243532][ T3206] em28xx 3-1:7.75: Binding DVB extension [ 444.253629][ T46] usb 3-1: USB disconnect, device number 63 [ 444.272033][ T3206] em28xx 3-1:7.75: no endpoint for DVB mode and transfer type 0 [ 444.283748][ T46] em28xx 3-1:7.75: Disconnecting em28xx [ 444.289882][ T3206] em28xx 3-1:7.75: failed to pre-allocate USB transfer buffers for DVB. [ 444.315307][ T3206] em28xx 3-1:7.75: Remote control support is not available for this card. [ 444.366472][ T46] em28xx 3-1:7.75: Closing input extension [ 444.429339][ T46] em28xx 3-1:7.75: Freeing device [ 444.890666][ T52] team0 (unregistering): Port device team_slave_1 removed [ 445.097439][ T52] team0 (unregistering): Port device team_slave_0 removed [ 445.419517][ T25] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 445.487165][ T5244] Bluetooth: hci3: command tx timeout [ 445.497265][ T25] dvb_usb_az6027 4-1:2.75: probe with driver dvb_usb_az6027 failed with error -110 [ 445.517193][ T5284] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 445.519767][ T25] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 445.541810][ T25] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 445.551701][ T25] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 445.711404][ T5284] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.781577][ T5284] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.791062][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.806531][ T5284] usb 5-1: Product: syz [ 445.820803][ T5284] usb 5-1: Manufacturer: syz [ 445.825538][ T5284] usb 5-1: SerialNumber: syz [ 445.834715][ T5284] cdc_ncm 5-1:1.0: skipping garbage [ 446.436440][T12056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.449217][T12056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.484185][ T5284] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 446.490399][ T5284] cdc_ncm 5-1:1.0: bind() failure [ 446.512973][ T5284] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 446.546985][ T5284] cdc_ncm 5-1:1.1: bind() failure [ 446.576573][ T5284] usb 5-1: USB disconnect, device number 88 [ 446.686364][T12056] team0: Port device team_slave_0 added [ 446.695411][T12056] team0: Port device team_slave_1 added [ 446.709707][T12165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 446.716445][T12165] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 446.726967][T12165] vhci_hcd vhci_hcd.0: Device attached [ 446.736524][T12166] vhci_hcd: connection closed [ 446.739000][ T1066] vhci_hcd: stop threads [ 446.766436][T12056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.775669][ T1066] vhci_hcd: release socket [ 446.780169][ T1066] vhci_hcd: disconnect device [ 446.782074][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.857898][T12056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.909256][T12056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.930888][T12056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.987769][T12056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.156330][T12056] hsr_slave_0: entered promiscuous mode [ 447.182872][T12056] hsr_slave_1: entered promiscuous mode [ 447.196706][T12056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.211272][T12056] Cannot create hsr debugfs directory [ 447.361558][ T46] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 447.527879][ T46] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 31 [ 447.543518][ T46] usb 3-1: can't read configurations, error -22 [ 447.562041][ T5244] Bluetooth: hci3: command tx timeout [ 447.701004][ T46] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 447.855272][ T46] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 31 [ 447.884417][ T46] usb 3-1: can't read configurations, error -22 [ 447.907013][ T46] usb usb3-port1: attempt power cycle [ 448.174803][T12056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 448.222230][T12056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 448.246111][T12056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 448.251145][ T46] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 448.285500][T12056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 448.343307][ T46] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 31 [ 448.370917][ T46] usb 3-1: can't read configurations, error -22 [ 448.480854][T12056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.500585][T12056] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.524754][ T46] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 448.591778][ T46] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 31 [ 448.618432][ T2564] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.625781][ T2564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.724805][ T46] usb 3-1: can't read configurations, error -22 [ 449.870542][ T46] usb usb3-port1: unable to enumerate USB device [ 449.901352][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.908516][T12232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.747352][T12243] netlink: 'syz.3.1805': attribute type 29 has an invalid length. [ 450.771006][ T5286] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 450.792487][T12245] netlink: 'syz.3.1805': attribute type 29 has an invalid length. [ 450.897972][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.976729][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.057050][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.120899][ T5286] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 451.188726][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.289759][T12056] veth0_vlan: entered promiscuous mode [ 451.342313][ T5286] usb 2-1: config 0 descriptor?? [ 451.379857][T12056] veth1_vlan: entered promiscuous mode [ 451.598226][T12056] veth0_macvtap: entered promiscuous mode [ 451.662749][T12056] veth1_macvtap: entered promiscuous mode [ 451.787589][ T5286] usbhid 2-1:0.0: can't add hid device: -71 [ 451.812385][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.832953][ T5286] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 451.869066][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.931218][ T5286] usb 2-1: USB disconnect, device number 97 [ 451.941028][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.020010][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.104279][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.166140][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.237596][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.309958][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.379809][T12056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.471968][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.510988][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.568702][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.610508][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.660990][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.681914][ T46] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 452.718366][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.772872][T12056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.816518][T12056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.860930][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 452.875845][T12056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.906838][ T46] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 452.945792][ T46] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 452.973800][T12056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.019742][ T46] usb 3-1: Product: syz [ 453.030922][ T46] usb 3-1: Manufacturer: syz [ 453.035711][T12056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.061064][ T46] usb 3-1: SerialNumber: syz [ 453.081860][T12056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.122156][ T46] usb 3-1: config 0 descriptor?? [ 453.139404][T12056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.512635][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.321260][T11403] sched: DL replenish lagged too much [ 460.689670][ T4682] udevd[4682]: worker [5229] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 463.194428][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.435336][ T5286] usb 3-1: USB disconnect, device number 68 [ 468.484417][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 468.501560][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 468.512319][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 468.528535][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 468.536447][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 468.544425][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.568207][ T8225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.851603][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 469.984348][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.007863][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 470.027924][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.036862][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 470.052399][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 470.068655][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.086158][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 470.093562][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 470.108474][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 470.127787][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 470.138435][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 470.211533][ T8225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.413896][T12232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.450947][T12232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.630958][ T54] Bluetooth: hci5: command tx timeout [ 470.935303][ T5244] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 470.945490][ T5244] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 470.954791][ T5244] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 470.964609][ T5244] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 470.972661][ T5244] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 470.980043][ T5244] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 471.746720][T12345] loop4: detected capacity change from 0 to 7 [ 471.759718][T12345] buffer_io_error: 4 callbacks suppressed [ 471.759738][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 471.799018][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 471.902367][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 471.932863][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 471.959622][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 471.996982][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.017789][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.056519][T12345] ldm_validate_partition_table(): Disk read failed. [ 472.071091][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.101190][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.156701][T12345] Buffer I/O error on dev loop4, logical block 0, async page read [ 472.181215][T12345] Dev loop4: unable to read RDB block 0 [ 472.205519][T12345] loop4: unable to read partition table [ 472.228846][T12345] loop4: partition table beyond EOD, truncated [ 472.251177][T12345] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 472.251177][T12345] ) failed (rc=-5) [ 472.681420][ T54] Bluetooth: hci5: command tx timeout [ 472.922265][ T54] Bluetooth: hci7: command tx timeout [ 472.929719][ T54] Bluetooth: hci6: command tx timeout [ 473.321279][ T54] Bluetooth: hci8: command tx timeout [ 474.760902][ T54] Bluetooth: hci5: command tx timeout [ 475.006698][ T54] Bluetooth: hci6: command tx timeout [ 475.012304][ T5244] Bluetooth: hci7: command tx timeout [ 475.401161][ T54] Bluetooth: hci8: command tx timeout [ 476.840984][ T54] Bluetooth: hci5: command tx timeout [ 477.081181][ T5244] Bluetooth: hci7: command tx timeout [ 477.089196][ T54] Bluetooth: hci6: command tx timeout [ 477.481161][ T54] Bluetooth: hci8: command tx timeout [ 479.170810][ T54] Bluetooth: hci6: command tx timeout [ 479.177461][ T54] Bluetooth: hci7: command tx timeout [ 479.561179][ T54] Bluetooth: hci8: command tx timeout [ 484.434303][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.450182][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.458954][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.468773][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.479242][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 484.486675][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.600935][ T5244] Bluetooth: hci0: command tx timeout [ 488.680910][ T5244] Bluetooth: hci0: command tx timeout [ 490.760922][ T5244] Bluetooth: hci0: command tx timeout [ 492.841051][ T5244] Bluetooth: hci0: command tx timeout [ 501.723231][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729598][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.879762][ T25] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 506.915578][ T25] dvb_usb_az6027 4-1:2.76: probe with driver dvb_usb_az6027 failed with error -110 [ 507.345566][ T25] usb 4-1: USB disconnect, device number 63 [ 525.268498][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 525.278741][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.287872][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.300520][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.312373][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 525.319794][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.416902][ T54] Bluetooth: hci1: command tx timeout [ 528.668330][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.678805][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.692865][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.703054][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.710877][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 528.721675][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 529.490878][ T54] Bluetooth: hci1: command tx timeout [ 529.983363][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.994343][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.003761][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.013729][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.031314][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 530.040574][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.113005][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 530.124752][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 530.133400][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 530.145033][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 530.156830][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 530.164851][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 530.761109][ T54] Bluetooth: hci2: command tx timeout [ 531.560909][ T54] Bluetooth: hci1: command tx timeout [ 532.121070][ T54] Bluetooth: hci4: command tx timeout [ 532.201064][ T54] Bluetooth: hci9: command tx timeout [ 532.841159][ T54] Bluetooth: hci2: command tx timeout [ 533.640899][ T54] Bluetooth: hci1: command tx timeout [ 534.206823][ T54] Bluetooth: hci4: command tx timeout [ 534.281088][ T54] Bluetooth: hci9: command tx timeout [ 534.923491][ T54] Bluetooth: hci2: command tx timeout [ 536.285248][ T54] Bluetooth: hci4: command tx timeout [ 536.361133][ T54] Bluetooth: hci9: command tx timeout [ 537.001050][ T54] Bluetooth: hci2: command tx timeout [ 538.360884][ T54] Bluetooth: hci4: command tx timeout [ 538.441068][ T54] Bluetooth: hci9: command tx timeout [ 545.260144][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 545.274639][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 545.283465][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 545.292014][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 545.300415][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 545.315646][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 547.401189][ T5235] Bluetooth: hci10: command tx timeout [ 549.481040][ T5235] Bluetooth: hci10: command tx timeout [ 551.573330][ T5235] Bluetooth: hci10: command tx timeout [ 553.641070][ T5235] Bluetooth: hci10: command tx timeout [ 563.166587][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.190918][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.247843][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 586.527861][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 586.538042][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 586.553057][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 586.562838][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 586.570667][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 586.578931][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 588.683371][ T54] Bluetooth: hci11: command tx timeout [ 588.965713][ T5244] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 588.976168][ T5244] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 588.987252][ T5244] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 588.995691][ T5244] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 589.006315][ T5244] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 589.013955][ T5244] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 590.296530][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 590.308952][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 590.318384][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 590.327473][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 590.340930][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 590.351975][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 590.440990][ T5235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 590.452279][ T5235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 590.463167][ T5235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 590.471654][ T5235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 590.481240][ T5235] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 590.491541][ T5235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 590.760949][ T5244] Bluetooth: hci11: command tx timeout [ 590.841186][ T5244] Bluetooth: hci5: command 0x0406 tx timeout [ 591.081391][ T54] Bluetooth: hci12: command tx timeout [ 592.441073][ T54] Bluetooth: hci13: command tx timeout [ 592.521150][ T54] Bluetooth: hci14: command tx timeout [ 592.840904][ T54] Bluetooth: hci11: command tx timeout [ 593.161107][ T54] Bluetooth: hci12: command tx timeout [ 594.520962][T12413] Bluetooth: hci13: command tx timeout [ 594.601035][T12413] Bluetooth: hci14: command tx timeout [ 594.920879][T12413] Bluetooth: hci11: command tx timeout [ 595.241071][T12413] Bluetooth: hci12: command tx timeout [ 595.995428][T12413] Bluetooth: hci6: command 0x0406 tx timeout [ 596.010816][T12413] Bluetooth: hci7: command 0x0406 tx timeout [ 596.018051][T12413] Bluetooth: hci8: command 0x0406 tx timeout [ 596.600989][ T5235] Bluetooth: hci13: command tx timeout [ 596.681048][ T5235] Bluetooth: hci14: command tx timeout [ 597.321176][ T5235] Bluetooth: hci12: command tx timeout [ 598.680821][ T5235] Bluetooth: hci13: command tx timeout [ 598.761006][ T5235] Bluetooth: hci14: command tx timeout [ 605.754886][ T5244] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 605.765264][ T5244] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 605.779285][ T5244] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 605.790954][ T5244] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 605.798750][ T5244] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 605.811152][ T5244] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 607.880948][ T5235] Bluetooth: hci15: command tx timeout [ 609.960838][ T5235] Bluetooth: hci15: command tx timeout [ 611.335555][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 612.040833][ T5244] Bluetooth: hci15: command tx timeout [ 614.121103][ T5244] Bluetooth: hci15: command tx timeout [ 623.960880][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 623.969909][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 624.014713][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 624.066448][ T30] task:kworker/u8:2 state:D stack:20440 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 624.210397][ T30] Workqueue: netns cleanup_net [ 624.246311][ T30] Call Trace: [ 624.249838][ T30] [ 624.301337][ T30] __schedule+0x1895/0x4b30 [ 624.305984][ T30] ? __pfx___schedule+0x10/0x10 [ 624.355808][ T30] ? __pfx_lock_release+0x10/0x10 [ 624.380803][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 624.386354][ T30] ? kthread_data+0x52/0xd0 [ 624.429334][ T30] ? schedule+0x90/0x320 [ 624.441272][ T30] ? wq_worker_sleeping+0x66/0x240 [ 624.446786][ T30] ? schedule+0x90/0x320 [ 624.472157][ T30] schedule+0x14b/0x320 [ 624.476433][ T30] schedule_preempt_disabled+0x13/0x30 [ 624.490367][ T30] __mutex_lock+0x6a7/0xd70 [ 624.495388][ T30] ? __mutex_lock+0x52a/0xd70 [ 624.501023][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 624.506121][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 624.518083][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 624.524948][ T30] cleanup_net+0x615/0xcc0 [ 624.529443][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 624.541036][ T30] ? process_scheduled_works+0x976/0x1850 [ 624.546831][ T30] process_scheduled_works+0xa63/0x1850 [ 624.558757][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.565144][ T30] ? assign_work+0x364/0x3d0 [ 624.569801][ T30] worker_thread+0x870/0xd30 [ 624.580789][ T30] ? __kthread_parkme+0x169/0x1d0 [ 624.587824][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.600502][ T30] kthread+0x2f0/0x390 [ 624.611251][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.617583][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.634695][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.639896][ T30] ? __pfx_kthread+0x10/0x10 [ 624.652400][ T30] ret_from_fork+0x4b/0x80 [ 624.656890][ T30] ? __pfx_kthread+0x10/0x10 [ 624.665425][ T30] ret_from_fork_asm+0x1a/0x30 [ 624.670301][ T30] [ 624.676381][ T30] INFO: task kworker/u8:3:52 blocked for more than 144 seconds. [ 624.690067][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 624.705227][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.724701][ T30] task:kworker/u8:3 state:D stack:20792 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 624.738282][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 624.748374][ T30] Call Trace: [ 624.756519][ T30] [ 624.759535][ T30] __schedule+0x1895/0x4b30 [ 624.768407][ T30] ? __pfx___schedule+0x10/0x10 [ 624.776151][ T30] ? __pfx_lock_release+0x10/0x10 [ 624.785222][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 624.795269][ T30] ? kthread_data+0x52/0xd0 [ 624.799845][ T30] ? schedule+0x90/0x320 [ 624.814933][ T30] ? wq_worker_sleeping+0x66/0x240 [ 624.820143][ T30] ? schedule+0x90/0x320 [ 624.827413][ T30] schedule+0x14b/0x320 [ 624.835529][ T30] schedule_preempt_disabled+0x13/0x30 [ 624.844373][ T30] __mutex_lock+0x6a7/0xd70 [ 624.848942][ T30] ? mark_lock+0x9a/0x360 [ 624.857202][ T30] ? __mutex_lock+0x52a/0xd70 [ 624.866410][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 624.875511][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 624.883422][ T30] addrconf_dad_work+0xd0/0x16f0 [ 624.888432][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 624.899737][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 624.908884][ T30] ? process_scheduled_works+0x976/0x1850 [ 624.919053][ T30] process_scheduled_works+0xa63/0x1850 [ 624.938801][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.945425][ T30] ? assign_work+0x364/0x3d0 [ 624.950089][ T30] worker_thread+0x870/0xd30 [ 624.960807][ T30] ? __kthread_parkme+0x169/0x1d0 [ 624.965924][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.978178][ T30] kthread+0x2f0/0x390 [ 624.982641][ T30] ? __pfx_worker_thread+0x10/0x10 [ 624.987811][ T30] ? __pfx_kthread+0x10/0x10 [ 625.000966][ T30] ret_from_fork+0x4b/0x80 [ 625.005460][ T30] ? __pfx_kthread+0x10/0x10 [ 625.020788][ T30] ret_from_fork_asm+0x1a/0x30 [ 625.025651][ T30] [ 625.036853][ T30] INFO: task kworker/u8:9:8225 blocked for more than 144 seconds. [ 625.046057][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 625.058520][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.069179][ T30] task:kworker/u8:9 state:D stack:23288 pid:8225 tgid:8225 ppid:2 flags:0x00004000 [ 625.085109][ T30] Workqueue: events_unbound linkwatch_event [ 625.096861][ T30] Call Trace: [ 625.100206][ T30] [ 625.108452][ T30] __schedule+0x1895/0x4b30 [ 625.114670][ T30] ? __pfx___schedule+0x10/0x10 [ 625.120172][ T30] ? __pfx_lock_release+0x10/0x10 [ 625.130463][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 625.137752][ T30] ? kthread_data+0x52/0xd0 [ 625.147381][ T30] ? schedule+0x90/0x320 [ 625.153525][ T30] ? wq_worker_sleeping+0x66/0x240 [ 625.158726][ T30] ? schedule+0x90/0x320 [ 625.170966][ T30] schedule+0x14b/0x320 [ 625.175223][ T30] schedule_preempt_disabled+0x13/0x30 [ 625.187726][ T30] __mutex_lock+0x6a7/0xd70 [ 625.192844][ T30] ? __mutex_lock+0x52a/0xd70 [ 625.199448][ T30] ? linkwatch_event+0xe/0x60 [ 625.210471][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 625.217775][ T30] ? process_scheduled_works+0x976/0x1850 [ 625.230314][ T30] linkwatch_event+0xe/0x60 [ 625.235813][ T30] process_scheduled_works+0xa63/0x1850 [ 625.250302][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.256826][ T30] ? assign_work+0x364/0x3d0 [ 625.267660][ T30] worker_thread+0x870/0xd30 [ 625.273929][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 625.279897][ T30] ? __kthread_parkme+0x169/0x1d0 [ 625.291162][ T30] ? __pfx_worker_thread+0x10/0x10 [ 625.296358][ T30] kthread+0x2f0/0x390 [ 625.308609][ T30] ? __pfx_worker_thread+0x10/0x10 [ 625.314136][ T30] ? __pfx_kthread+0x10/0x10 [ 625.318879][ T30] ret_from_fork+0x4b/0x80 [ 625.331111][ T30] ? __pfx_kthread+0x10/0x10 [ 625.335777][ T30] ret_from_fork_asm+0x1a/0x30 [ 625.340619][ T30] [ 625.350952][ T30] INFO: task syz-executor:11403 blocked for more than 144 seconds. [ 625.358904][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 625.372562][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.385350][ T30] task:syz-executor state:D stack:20992 pid:11403 tgid:11403 ppid:1 flags:0x00004006 [ 625.400501][ T30] Call Trace: [ 625.410792][ T30] [ 625.413794][ T30] __schedule+0x1895/0x4b30 [ 625.418381][ T30] ? __pfx___schedule+0x10/0x10 [ 625.429059][ T30] ? __pfx_lock_release+0x10/0x10 [ 625.435054][ T30] ? schedule+0x90/0x320 [ 625.439397][ T30] schedule+0x14b/0x320 [ 625.450026][ T30] schedule_timeout+0xb0/0x310 [ 625.456518][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 625.468172][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.474703][ T30] ? wait_for_completion+0x2fe/0x620 [ 625.480059][ T30] ? wait_for_completion+0x2fe/0x620 [ 625.495435][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.501177][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 625.508178][ T30] ? wait_for_completion+0x2fe/0x620 [ 625.521800][ T30] wait_for_completion+0x355/0x620 [ 625.526999][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 625.540008][ T30] ? __flush_work+0xe7/0xc50 [ 625.544997][ T30] __flush_work+0xa37/0xc50 [ 625.549564][ T30] ? __flush_work+0xe7/0xc50 [ 625.560499][ T30] ? __pfx___flush_work+0x10/0x10 [ 625.565988][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 625.579420][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 625.586113][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 625.597455][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.603135][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 625.610962][ T30] ? __pfx_lock_release+0x10/0x10 [ 625.616056][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 625.634492][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.640585][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 625.664549][ T30] ? __queue_work+0x199/0xf50 [ 625.669324][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 625.677661][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 625.686855][ T30] unregister_netdevice_queue+0x303/0x370 [ 625.697119][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 625.707367][ T30] __tun_detach+0x6b9/0x1600 [ 625.716456][ T30] tun_chr_close+0x105/0x1b0 [ 625.726440][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 625.735052][ T30] __fput+0x23f/0x880 [ 625.739125][ T30] task_work_run+0x24f/0x310 [ 625.748354][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 625.757662][ T30] ? __pfx_task_work_run+0x10/0x10 [ 625.767370][ T30] ? do_exit+0xa2a/0x28e0 [ 625.774463][ T30] ? kmem_cache_free+0x1a2/0x420 [ 625.779469][ T30] ? do_exit+0xa2a/0x28e0 [ 625.787838][ T30] do_exit+0xa2f/0x28e0 [ 625.794765][ T30] ? __pfx_do_exit+0x10/0x10 [ 625.799409][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 625.809104][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.820918][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 625.827325][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 625.839337][ T30] do_group_exit+0x207/0x2c0 [ 625.844342][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.849601][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 625.861473][ T30] get_signal+0x176f/0x1810 [ 625.866070][ T30] ? __pfx_get_signal+0x10/0x10 [ 625.878550][ T30] arch_do_signal_or_restart+0x96/0x860 [ 625.885802][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 625.897113][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.904577][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 625.910353][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 625.920782][ T30] do_syscall_64+0x100/0x230 [ 625.925439][ T30] ? clear_bhb_loop+0x35/0x90 [ 625.930166][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.944393][ T30] RIP: 0033:0x7f591037c93c [ 625.948869][ T30] RSP: 002b:00007f591065fd90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.961652][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f591037c93c [ 625.969687][ T30] RDX: 0000000000000028 RSI: 00007f591065fe40 RDI: 00000000000000f9 [ 625.984691][ T30] RBP: 00007f591065fdec R08: 0000000000000000 R09: 0079746972756365 [ 625.997372][ T30] R10: 00007f59105087e0 R11: 0000000000000246 R12: 000055557c08d5eb [ 626.008247][ T30] R13: 000055557c08d590 R14: 000000000006f58c R15: 00007f591065fe40 [ 626.022119][ T30] [ 626.025291][ T30] INFO: task syz.1.1804:12236 blocked for more than 145 seconds. [ 626.039653][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 626.049908][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.062584][ T30] task:syz.1.1804 state:D stack:24864 pid:12236 tgid:12236 ppid:11329 flags:0x00004006 [ 626.076721][ T30] Call Trace: [ 626.080052][ T30] [ 626.085714][ T30] __schedule+0x1895/0x4b30 [ 626.090303][ T30] ? __pfx___schedule+0x10/0x10 [ 626.100632][ T30] ? __pfx_lock_release+0x10/0x10 [ 626.105906][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 626.118160][ T30] ? schedule+0x90/0x320 [ 626.124895][ T30] schedule+0x14b/0x320 [ 626.129120][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.141630][ T30] __mutex_lock+0x6a7/0xd70 [ 626.146220][ T30] ? __mutex_lock+0x52a/0xd70 [ 626.157339][ T30] ? tun_chr_close+0x3b/0x1b0 [ 626.168393][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 626.178965][ T30] ? __pfx_call_rcu+0x10/0x10 [ 626.185355][ T30] tun_chr_close+0x3b/0x1b0 [ 626.189936][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 626.200519][ T30] __fput+0x23f/0x880 [ 626.206236][ T30] task_work_run+0x24f/0x310 [ 626.216039][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 626.227306][ T30] ? __pfx_task_work_run+0x10/0x10 [ 626.237600][ T30] ? do_exit+0xa2a/0x28e0 [ 626.244154][ T30] ? kmem_cache_free+0x1a2/0x420 [ 626.249168][ T30] ? do_exit+0xa2a/0x28e0 [ 626.259223][ T30] do_exit+0xa2f/0x28e0 [ 626.265004][ T30] ? __pfx_do_exit+0x10/0x10 [ 626.269683][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 626.285674][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.294611][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 626.304944][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 626.310144][ T30] do_group_exit+0x207/0x2c0 [ 626.317682][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.329929][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 626.338532][ T30] get_signal+0x176f/0x1810 [ 626.347550][ T30] ? __pfx_get_signal+0x10/0x10 [ 626.355300][ T30] ? __pfx___might_resched+0x10/0x10 [ 626.365791][ T30] arch_do_signal_or_restart+0x96/0x860 [ 626.374231][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 626.380462][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.396547][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 626.402768][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 626.408387][ T30] do_syscall_64+0x100/0x230 [ 626.419493][ T30] ? clear_bhb_loop+0x35/0x90 [ 626.424629][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.439510][ T30] RIP: 0033:0x7fbeaf97def9 [ 626.446148][ T30] RSP: 002b:00007fbeafc5fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 626.461758][ T30] RAX: 0000000000000000 RBX: 000000000006dd57 RCX: 00007fbeaf97def9 [ 626.469816][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 626.484319][ T30] RBP: 00007fbeafb37a80 R08: 0000000000000001 R09: 00007fbeafc5fe7f [ 626.494994][ T30] R10: 00007fbeaf800000 R11: 0000000000000246 R12: 000000000006e4cf [ 626.508089][ T30] R13: 00007fbeafc5fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 626.517835][ T30] [ 626.530529][ T30] INFO: task syz-executor:12317 blocked for more than 145 seconds. [ 626.544612][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 626.555667][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.569596][ T30] task:syz-executor state:D stack:21728 pid:12317 tgid:12317 ppid:1 flags:0x00000004 [ 626.581575][ T30] Call Trace: [ 626.584988][ T30] [ 626.587953][ T30] __schedule+0x1895/0x4b30 [ 626.597873][ T30] ? __pfx___schedule+0x10/0x10 [ 626.604520][ T30] ? __pfx_lock_release+0x10/0x10 [ 626.609703][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 626.622240][ T30] ? schedule+0x90/0x320 [ 626.626545][ T30] schedule+0x14b/0x320 [ 626.638950][ T30] schedule_preempt_disabled+0x13/0x30 [ 626.644797][ T30] __mutex_lock+0x6a7/0xd70 [ 626.649361][ T30] ? __mutex_lock+0x52a/0xd70 [ 626.661368][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 626.666640][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 626.680078][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 626.700741][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 626.705939][ T30] ? __lock_acquire+0x1384/0x2050 [ 626.717247][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 626.723695][ T30] netlink_rcv_skb+0x1e3/0x430 [ 626.728614][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 626.740757][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.746143][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 626.757133][ T30] netlink_unicast+0x7f6/0x990 [ 626.764441][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 626.769970][ T30] ? __virt_addr_valid+0x183/0x530 [ 626.782022][ T30] ? __check_object_size+0x48e/0x900 [ 626.787387][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 626.798612][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.805483][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 626.810571][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.820751][ T30] __sock_sendmsg+0x221/0x270 [ 626.825502][ T30] __sys_sendto+0x398/0x4f0 [ 626.830058][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 626.842905][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.848193][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 626.859802][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 626.869034][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 626.879527][ T30] __x64_sys_sendto+0xde/0x100 [ 626.887546][ T30] do_syscall_64+0xf3/0x230 [ 626.896033][ T30] ? clear_bhb_loop+0x35/0x90 [ 626.903508][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.909474][ T30] RIP: 0033:0x7f72db57fd8c [ 626.919177][ T30] RSP: 002b:00007f72db85f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 626.930559][ T30] RAX: ffffffffffffffda RBX: 00007f72dc264620 RCX: 00007f72db57fd8c [ 626.944355][ T30] RDX: 000000000000003c RSI: 00007f72dc264670 RDI: 0000000000000003 [ 626.955332][ T30] RBP: 0000000000000000 R08: 00007f72db85f704 R09: 000000000000000c [ 626.969208][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 626.980050][ T30] R13: 0000000000000000 R14: 00007f72dc264670 R15: 0000000000000000 [ 626.991300][ T30] [ 626.998015][ T30] INFO: task syz-executor:12329 blocked for more than 146 seconds. [ 627.008190][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 627.022678][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.037717][ T30] task:syz-executor state:D stack:25712 pid:12329 tgid:12329 ppid:1 flags:0x00004006 [ 627.050204][ T30] Call Trace: [ 627.060024][ T30] [ 627.063329][ T30] __schedule+0x1895/0x4b30 [ 627.067928][ T30] ? __pfx___schedule+0x10/0x10 [ 627.079699][ T30] ? __pfx_lock_release+0x10/0x10 [ 627.086684][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 627.098468][ T30] ? schedule+0x90/0x320 [ 627.103408][ T30] schedule+0x14b/0x320 [ 627.107887][ T30] schedule_preempt_disabled+0x13/0x30 [ 627.119782][ T30] __mutex_lock+0x6a7/0xd70 [ 627.124786][ T30] ? __mutex_lock+0x52a/0xd70 [ 627.129533][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 627.140955][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 627.149812][ T30] ? read_word_at_a_time+0xe/0x20 [ 627.163140][ T30] ? sized_strscpy+0x8d/0x220 [ 627.167995][ T30] ip_tunnel_init_net+0x20e/0x720 [ 627.183368][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 627.189037][ T30] vti_init_net+0x2e/0xf0 [ 627.197972][ T30] ops_init+0x31e/0x590 [ 627.206464][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 627.215306][ T30] setup_net+0x287/0x9e0 [ 627.219728][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 627.229380][ T30] ? __pfx_setup_net+0x10/0x10 [ 627.237034][ T30] copy_net_ns+0x33f/0x570 [ 627.246828][ T30] create_new_namespaces+0x425/0x7b0 [ 627.257397][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 627.266255][ T30] ksys_unshare+0x619/0xc10 [ 627.275757][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 627.283697][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 627.289782][ T30] ? do_syscall_64+0x100/0x230 [ 627.298784][ T30] __x64_sys_unshare+0x38/0x40 [ 627.306415][ T30] do_syscall_64+0xf3/0x230 [ 627.314953][ T30] ? clear_bhb_loop+0x35/0x90 [ 627.319710][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.336236][ T30] RIP: 0033:0x7fc5b757f6f7 [ 627.341119][ T30] RSP: 002b:00007fc5b785ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 627.357595][ T30] RAX: ffffffffffffffda RBX: 00007fc5b75f22ec RCX: 00007fc5b757f6f7 [ 627.366209][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 627.382308][ T30] RBP: 0000000000000000 R08: 00007fc5b8267d60 R09: 0000000000000000 [ 627.390364][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 627.405760][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 627.415446][ T30] [ 627.418592][ T30] INFO: task syz-executor:12335 blocked for more than 146 seconds. [ 627.431845][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 627.439181][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.456944][ T30] task:syz-executor state:D stack:25824 pid:12335 tgid:12335 ppid:1 flags:0x00004006 [ 627.470163][ T30] Call Trace: [ 627.477546][ T30] [ 627.480574][ T30] __schedule+0x1895/0x4b30 [ 627.489559][ T30] ? __pfx___schedule+0x10/0x10 [ 627.499690][ T30] ? __pfx_lock_release+0x10/0x10 [ 627.507645][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 627.517020][ T30] ? schedule+0x90/0x320 [ 627.524058][ T30] schedule+0x14b/0x320 [ 627.528277][ T30] schedule_preempt_disabled+0x13/0x30 [ 627.537716][ T30] __mutex_lock+0x6a7/0xd70 [ 627.545054][ T30] ? __mutex_lock+0x52a/0xd70 [ 627.549792][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 627.568599][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 627.575260][ T30] ? read_word_at_a_time+0xe/0x20 [ 627.580345][ T30] ? sized_strscpy+0x8d/0x220 [ 627.590612][ T30] ip_tunnel_init_net+0x20e/0x720 [ 627.595968][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 627.607747][ T30] ? ops_init+0x75/0x590 [ 627.612371][ T30] ops_init+0x31e/0x590 [ 627.616582][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 627.630332][ T30] setup_net+0x287/0x9e0 [ 627.634956][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 627.640570][ T30] ? __pfx_setup_net+0x10/0x10 [ 627.650727][ T30] copy_net_ns+0x33f/0x570 [ 627.658263][ T30] create_new_namespaces+0x425/0x7b0 [ 627.668915][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 627.678005][ T30] ksys_unshare+0x619/0xc10 [ 627.688228][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 627.694896][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 627.706124][ T30] ? do_syscall_64+0x100/0x230 [ 627.712525][ T30] __x64_sys_unshare+0x38/0x40 [ 627.717370][ T30] do_syscall_64+0xf3/0x230 [ 627.740226][ T30] ? clear_bhb_loop+0x35/0x90 [ 627.745414][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.758156][ T30] RIP: 0033:0x7efc1d57f6f7 [ 627.764277][ T30] RSP: 002b:00007efc1d85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 627.775255][ T30] RAX: ffffffffffffffda RBX: 00007efc1d5f22ec RCX: 00007efc1d57f6f7 [ 627.791959][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 627.799999][ T30] RBP: 0000000000000000 R08: 00007efc1e267d60 R09: 0000000000000000 [ 627.820882][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 627.828932][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 627.843409][ T30] [ 627.846568][ T30] INFO: task syz.0.1816:12362 blocked for more than 147 seconds. [ 627.859080][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 627.874659][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 627.885167][ T30] task:syz.0.1816 state:D stack:26752 pid:12362 tgid:12361 ppid:12056 flags:0x00000004 [ 627.904170][ T30] Call Trace: [ 627.907686][ T30] [ 627.914756][ T30] __schedule+0x1895/0x4b30 [ 627.919365][ T30] ? __pfx___schedule+0x10/0x10 [ 627.927114][ T30] ? __pfx_lock_release+0x10/0x10 [ 627.936038][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 627.944399][ T30] ? schedule+0x90/0x320 [ 627.948715][ T30] schedule+0x14b/0x320 [ 627.956986][ T30] schedule_preempt_disabled+0x13/0x30 [ 627.968063][ T30] __mutex_lock+0x6a7/0xd70 [ 627.978109][ T30] ? __mutex_lock+0x52a/0xd70 [ 627.985657][ T30] ? rtnl_dumpit+0x99/0x200 [ 627.990232][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 628.000073][ T30] ? __alloc_skb+0x28f/0x440 [ 628.008067][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 628.018549][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 628.026725][ T30] rtnl_dumpit+0x99/0x200 [ 628.035136][ T30] netlink_dump+0x647/0xd80 [ 628.039729][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 628.048120][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 628.057161][ T30] __netlink_dump_start+0x5a2/0x790 [ 628.065367][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 628.076490][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 628.085342][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.096317][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 628.102875][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 628.108326][ T30] ? ref_tracker_free+0x643/0x7e0 [ 628.119188][ T30] netlink_rcv_skb+0x1e3/0x430 [ 628.125852][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.138432][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.145382][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.150645][ T30] netlink_unicast+0x7f6/0x990 [ 628.162001][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 628.169164][ T30] ? __virt_addr_valid+0x183/0x530 [ 628.179664][ T30] ? __check_object_size+0x48e/0x900 [ 628.188507][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 628.198438][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.205453][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 628.210479][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.220813][ T30] __sock_sendmsg+0x221/0x270 [ 628.225607][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 628.230440][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.243432][ T30] __sys_sendmsg+0x2aa/0x390 [ 628.248130][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.258760][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 628.266759][ T30] ? do_syscall_64+0x100/0x230 [ 628.278464][ T30] ? do_syscall_64+0xb6/0x230 [ 628.284752][ T30] do_syscall_64+0xf3/0x230 [ 628.289348][ T30] ? clear_bhb_loop+0x35/0x90 [ 628.300785][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.306847][ T30] RIP: 0033:0x7f7378b7def9 [ 628.317795][ T30] RSP: 002b:00007f73799cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.326752][ T30] RAX: ffffffffffffffda RBX: 00007f7378d35f80 RCX: 00007f7378b7def9 [ 628.341203][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 628.349253][ T30] RBP: 00007f7378bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 628.366978][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.380972][ T30] R13: 0000000000000000 R14: 00007f7378d35f80 R15: 00007f7378e5fa28 [ 628.389051][ T30] [ 628.398421][ T30] [ 628.398421][ T30] Showing all locks held in the system: [ 628.406750][ T30] 1 lock held by khungtaskd/30: [ 628.419343][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 628.429712][ T30] 4 locks held by kworker/u8:2/35: [ 628.441235][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 628.459466][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 628.472130][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 628.489708][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 628.499583][ T30] 3 locks held by kworker/u8:3/52: [ 628.511058][ T30] #0: ffff88814bb68948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 628.531697][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 628.549813][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 628.561010][ T30] 2 locks held by getty/4989: [ 628.565757][ T30] #0: ffff88814bd3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 628.580753][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 628.598172][ T30] 4 locks held by kworker/0:4/5283: [ 628.607767][ T30] 3 locks held by kworker/1:4/5286: [ 628.619459][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 628.638335][ T30] #1: ffffc90004037d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 628.651170][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 628.667192][ T30] 3 locks held by kworker/u8:9/8225: [ 628.672904][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 628.693432][ T30] #1: ffffc90009d9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 628.709508][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 628.722669][ T30] 2 locks held by syz-executor/11403: [ 628.728100][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 628.740756][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 628.757862][ T30] 1 lock held by syz.1.1804/12236: [ 628.782340][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 628.799546][ T30] 1 lock held by syz-executor/12317: [ 628.807222][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 628.824585][ T30] 2 locks held by syz-executor/12327: [ 628.830022][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 628.844158][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 628.857563][ T30] 2 locks held by syz-executor/12329: [ 628.866881][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 628.885242][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 628.897868][ T30] 2 locks held by syz-executor/12335: [ 628.907124][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 628.920618][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 628.930389][ T30] 2 locks held by syz.0.1816/12362: [ 628.942512][ T30] #0: ffff8880653796c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 628.962213][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 628.976489][ T30] 2 locks held by syz-executor/12366: [ 628.983475][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.000908][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.020037][ T30] 2 locks held by syz-executor/12378: [ 629.025839][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.041824][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.059329][ T30] 2 locks held by syz-executor/12382: [ 629.066305][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.081103][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.098808][ T30] 2 locks held by syz-executor/12390: [ 629.105876][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.120730][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.136931][ T30] 2 locks held by syz-executor/12391: [ 629.142804][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.158799][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.176642][ T30] 2 locks held by syz-executor/12396: [ 629.182123][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.200039][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.211378][ T30] 2 locks held by syz-executor/12402: [ 629.216800][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.234108][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.248768][ T30] 2 locks held by syz-executor/12406: [ 629.257086][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.271124][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.289605][ T30] 2 locks held by syz-executor/12410: [ 629.297321][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.313470][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.326976][ T30] 2 locks held by syz-executor/12412: [ 629.337985][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.351239][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.367797][ T30] 2 locks held by syz-executor/12420: [ 629.373573][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 629.389505][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 629.411605][ T30] [ 629.414001][ T30] ============================================= [ 629.414001][ T30] [ 629.429362][ T30] NMI backtrace for cpu 1 [ 629.433753][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 629.444206][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 629.454306][ T30] Call Trace: [ 629.457622][ T30] [ 629.460583][ T30] dump_stack_lvl+0x241/0x360 [ 629.465312][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.470560][ T30] ? __pfx__printk+0x10/0x10 [ 629.475206][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 629.480199][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 629.485708][ T30] ? _printk+0xd5/0x120 [ 629.489908][ T30] ? __pfx__printk+0x10/0x10 [ 629.494540][ T30] ? __wake_up_klogd+0xcc/0x110 [ 629.499448][ T30] ? __pfx__printk+0x10/0x10 [ 629.504085][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 629.509245][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 629.515272][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 629.521310][ T30] watchdog+0xff4/0x1040 [ 629.525606][ T30] ? watchdog+0x1ea/0x1040 [ 629.530072][ T30] ? __pfx_watchdog+0x10/0x10 [ 629.534792][ T30] kthread+0x2f0/0x390 [ 629.538897][ T30] ? __pfx_watchdog+0x10/0x10 [ 629.543660][ T30] ? __pfx_kthread+0x10/0x10 [ 629.548287][ T30] ret_from_fork+0x4b/0x80 [ 629.552753][ T30] ? __pfx_kthread+0x10/0x10 [ 629.557382][ T30] ret_from_fork_asm+0x1a/0x30 [ 629.562206][ T30] [ 629.566160][ T30] Sending NMI from CPU 1 to CPUs 0: [ 629.572059][ C0] NMI backtrace for cpu 0 [ 629.572073][ C0] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:4 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 629.572096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 629.572109][ C0] Workqueue: events nsim_dev_trap_report_work [ 629.572139][ C0] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 629.572162][ C0] Code: 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 58 3f 89 7e 2b b9 47 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df [ 629.572179][ C0] RSP: 0018:ffffc90000007b78 EFLAGS: 00000087 [ 629.572195][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff819c784c [ 629.572208][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901c82a8 [ 629.572221][ C0] RBP: 0000000000000000 R08: ffffffff901c82af R09: 1ffffffff2039055 [ 629.572235][ C0] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff888144abd65c [ 629.572249][ C0] R13: ffffea00021dd500 R14: 00000000000fba80 R15: 0000000000000286 [ 629.572264][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 629.572285][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.572299][ C0] CR2: 0000001b2f35ffff CR3: 000000000e734000 CR4: 00000000003506f0 [ 629.572314][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 629.572326][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 629.572339][ C0] Call Trace: [ 629.572346][ C0] [ 629.572354][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 629.572383][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 629.572412][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 629.572439][ C0] ? nmi_handle+0x2a/0x5a0 [ 629.572465][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 629.572489][ C0] ? nmi_handle+0x14f/0x5a0 [ 629.572507][ C0] ? nmi_handle+0x2a/0x5a0 [ 629.572525][ C0] ? rcu_is_watching+0x10/0xb0 [ 629.572544][ C0] ? default_do_nmi+0x63/0x160 [ 629.572563][ C0] ? exc_nmi+0x123/0x1f0 [ 629.572579][ C0] ? end_repeat_nmi+0xf/0x53 [ 629.572606][ C0] ? trace_irq_enable+0x2c/0x120 [ 629.572629][ C0] ? rcu_is_watching+0x10/0xb0 [ 629.572649][ C0] ? rcu_is_watching+0x10/0xb0 [ 629.572669][ C0] ? rcu_is_watching+0x10/0xb0 [ 629.572688][ C0] [ 629.572694][ C0] [ 629.572702][ C0] trace_irq_enable+0x3b/0x120 [ 629.572723][ C0] trace_hardirqs_on+0x18/0x40 [ 629.572744][ C0] kasan_quarantine_put+0xdc/0x230 [ 629.572774][ C0] ? dst_destroy+0x2ac/0x460 [ 629.572798][ C0] kmem_cache_free+0x1a2/0x420 [ 629.572821][ C0] ? dst_destroy+0x2ac/0x460 [ 629.572846][ C0] dst_destroy+0x2ac/0x460 [ 629.572870][ C0] ? rcu_core+0xa37/0x17a0 [ 629.572887][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 629.572910][ C0] rcu_core+0xaaa/0x17a0 [ 629.572935][ C0] ? __pfx_rcu_core+0x10/0x10 [ 629.572969][ C0] handle_softirqs+0x2c5/0x980 [ 629.572996][ C0] ? do_softirq+0x11b/0x1e0 [ 629.573021][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 629.573050][ C0] do_softirq+0x11b/0x1e0 [ 629.573072][ C0] [ 629.573079][ C0] [ 629.573086][ C0] ? __pfx_do_softirq+0x10/0x10 [ 629.573109][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 629.573138][ C0] ? rcu_is_watching+0x15/0xb0 [ 629.573158][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 629.573182][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 629.573208][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 629.573232][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 629.573256][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 629.573291][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 629.573325][ C0] ? process_scheduled_works+0x976/0x1850 [ 629.573350][ C0] process_scheduled_works+0xa63/0x1850 [ 629.573387][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 629.573416][ C0] ? assign_work+0x364/0x3d0 [ 629.573442][ C0] worker_thread+0x870/0xd30 [ 629.573471][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 629.573494][ C0] ? __kthread_parkme+0x169/0x1d0 [ 629.573522][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.573546][ C0] kthread+0x2f0/0x390 [ 629.573563][ C0] ? __pfx_worker_thread+0x10/0x10 [ 629.573587][ C0] ? __pfx_kthread+0x10/0x10 [ 629.573605][ C0] ret_from_fork+0x4b/0x80 [ 629.573629][ C0] ? __pfx_kthread+0x10/0x10 [ 629.573646][ C0] ret_from_fork_asm+0x1a/0x30 [ 629.573680][ C0] [ 630.045345][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 630.052357][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 630.062558][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 630.072660][ T30] Call Trace: [ 630.075971][ T30] [ 630.078937][ T30] dump_stack_lvl+0x241/0x360 [ 630.083673][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.088921][ T30] ? __pfx__printk+0x10/0x10 [ 630.093565][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 630.099600][ T30] ? vscnprintf+0x5d/0x90 [ 630.103990][ T30] panic+0x349/0x880 [ 630.107933][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 630.114156][ T30] ? __pfx_panic+0x10/0x10 [ 630.118610][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 630.124021][ T30] ? __irq_work_queue_local+0x137/0x410 [ 630.129609][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 630.135020][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 630.141246][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 630.147450][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 630.153661][ T30] watchdog+0x1033/0x1040 [ 630.158038][ T30] ? watchdog+0x1ea/0x1040 [ 630.162503][ T30] ? __pfx_watchdog+0x10/0x10 [ 630.167223][ T30] kthread+0x2f0/0x390 [ 630.171324][ T30] ? __pfx_watchdog+0x10/0x10 [ 630.176045][ T30] ? __pfx_kthread+0x10/0x10 [ 630.180691][ T30] ret_from_fork+0x4b/0x80 [ 630.185169][ T30] ? __pfx_kthread+0x10/0x10 [ 630.189802][ T30] ret_from_fork_asm+0x1a/0x30 [ 630.194630][ T30] [ 630.197919][ T30] Kernel Offset: disabled [ 630.202262][ T30] Rebooting in 86400 seconds..