last executing test programs: 5.904671884s ago: executing program 1 (id=985): socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 3.835834009s ago: executing program 1 (id=992): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = open(&(0x7f0000000240)='./bus\x00', 0x10d27e, 0x0) fallocate(r1, 0x0, 0x0, 0x7fff) 3.587223913s ago: executing program 1 (id=997): r0 = socket$inet6(0xa, 0x6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x10d, 0x6, &(0x7f0000000080)=ANY=[], 0x8) syz_open_dev$media(&(0x7f0000000000), 0xff, 0x8000) 3.54821s ago: executing program 0 (id=999): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000080), 0x0) 3.402527854s ago: executing program 2 (id=1000): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r2], &(0x7f0000000040)}) 3.371525227s ago: executing program 0 (id=1001): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r2 = fanotify_init(0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, 0x0, 0x0) 3.311955961s ago: executing program 4 (id=1002): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x0, 0x0, 0xc6}, 0x48) 3.10650055s ago: executing program 4 (id=1003): r0 = syz_io_uring_setup(0x4bd, &(0x7f0000000080)={0x0, 0x0, 0x10110}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.077814273s ago: executing program 2 (id=1004): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 3.053391013s ago: executing program 4 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x20008000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, 0x0, 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x401, 0x0) ustat(0x11, &(0x7f0000000600)) msgsnd(0x0, &(0x7f0000001280)={0x1}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) 3.029005155s ago: executing program 0 (id=1006): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x48}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) vmsplice(r0, &(0x7f0000000a40)=[{&(0x7f0000000c40)="53583a9d79206099e5ad3f16f535812c14bf439bf6e072ff662c85b9f1af3b93660312bbf06c355e624f728f635ac43b4a039a30b20f08fddeaa8dc1b609f7f6332c76ec1cb856c136cc2d748bb0947c8ef356854570f4eb95b4b87aea1ebd8707afa3c9cf43e1132f023b8d8abbaa1e58e80845a3f0d19f39a3af61c0853f042db92f7797719690bc1ab53f", 0x8c}, {&(0x7f0000000180)="12b88b92244e28d3f88feecb95128765975bdc036deddd9914f13b64605897430621e27a325f45746d174d4a8e", 0x2d}, {&(0x7f0000000240)="e2c8e585ca54d4ae79c2d3199cddc64cfb120633acff03994070293475eaed834d5b4ceb2c7cc64540b8847bfd06c2fc96eaa2431b30111117ca891af6fa42be7f3ac07cd362868a7afa6c3324e16a40ae960fcef064a967ab93ca98c8907b0c51750221389ab3a9906ecde7132cee716baba48b7208ccfe7610120a8363fe34ef9b6fb1f5694e0fa35930557b65acb177bd254b67563a7e2929514820f374f87297a4084cd50b3fde13c1f242619ea857e34b711134a4c8a0d9af7bfd6fb483ce33c6ddb329d8539209bda069b0ad", 0xcf}, {&(0x7f0000000340)="c03c224b7409a7006e94976a24a8bcff83814b53d138d77a6e5aa446b6875d7346ae735d74b3dc1691791a1ace035f91a9caff29206dc0191fd5d36efe9a424e0c72071c9f54dd7fb4941adca7e575cf6b330ba6efdbf0e1513e13275f3926eb8a8b88142b92b5ef0cdcb69b80e35c30cf50823125479343df", 0x79}, {&(0x7f00000003c0)="f022317ea0ec028c5336c523617045dfd2d7750df85e407fc8042be6decd33f9438b144f54ac8f5c25f1db2d638d5d0049a7c72ce170b8e6947c92f29f066008a96e29da3124697053f1d9729c1169aa68e83f0178cf69c03e42c3cd1922e75a972459331de30d7a8f3bb676845883fe7c53e83c35f6cbb13442fa94d26d7a29698b9e46ec60665ee8030aa30ac86c37ba49", 0x92}, {&(0x7f0000000480)="19069115bc129f00c952067cdc334f23d1a91f4b6127a20f81e10ade116460e1348c0d7265ee4076e9115e21efe6d9c40810749638ba0ba7f6d8d57d15d4039c3ba8c634b39a2c3cc547a0bab9f17b25d0cb53d21eb39394a48bd81de815c8008a37f6d585406b78250df30196bd2d1c2f4dedfd749f0b9d16716262d2eb1604", 0x80}, {&(0x7f0000000500)="3bcdf8983cfd4e0b2ccdea7b41a45e43190974551a53b8217d91e6603b802955a266a95fa8609420fcdf926a70fda0caf7ab471c0d9500a2c728a8ea560486f0faceec45a5c0f3d4eb167e4ecf69341327ead68e66e2b36367e8995c55557dc02420aa845d9885726fe8ff", 0x6b}, {&(0x7f0000000600)="77b974fc70239d8caa9921ed38eb415f7b5c5c7773e8acaab19bd1e59340dbf6612866f71c586e5abe8dbfe0708570fca421f7890b86e02a184cac2d56d9f5f0a19d55af4c4b4d1f09ebc5932d7b185aa37d71ecc39454e85755b53c5efc1403591061bbf22ec6118aee27656b28f0c5f8a748d65891da26bff14db5eba0c5ab612376ad10e8fd1753d1b45c99dbf7ee7b37ed08e4b1a3b2ff4d0d12bb99ce193714e1fd808e9214429cf213fe5e7ae78832573262511da646fefa4c6230960029327f313ba8af83d30dff86d07b54eb582391bb65ea37f015a1fa41195060d49b732aa69ca49d74cfa7110a369ec35180360e0d1dd61aedd2cc4c40184862cf2e990fad46509dd9e17bb4d213daad487cc6dd46a68f6ffeb34da8a3cf42ca53c4dc3d9004815a1199f212bbf6f261cbdd3aec6f0890efa615c935b5b9460386d0a7bd3331d1ba94c445887274f693afe21dc2257ba01e6cd29c7f6a1f069900", 0x160}, {0x0}, {&(0x7f0000000b40)="2554fb73d7aae8d1d8bef784d7083caa99e3efacfe471d4e656228f624679d5c3c497b1dfdf911296de0e69c98111ee1e4c8789d743e07ce44e10900000000000000df08c81157ee0d3d6e37484b0fd0cfc486d095c12479da662932bf", 0x5d}, {&(0x7f00000009c0)="91e40a38f86622bfb88b5bf34b8e9e1298730d4f139009ff87923d62817fb076e73059343176a3b7a077f20ae6ba15ea5d41f573e177049f8f2b6841f16f1cd53a1d3f31346e8e6c394ed905a386a6bd1651c990854a63", 0x57}], 0xb, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 1.966608439s ago: executing program 1 (id=1007): r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) 1.966344628s ago: executing program 2 (id=1008): ioperm(0x0, 0x7, 0x40000000000006) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) kcmp(r1, r1, 0x0, r0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000003c0)='subflow_check_data_avail\x00', r2}, 0x10) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x1a}, &(0x7f0000000040)=0x20) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1.964439667s ago: executing program 3 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}]}, 0x34}}, 0x0) 1.952260935s ago: executing program 0 (id=1010): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigprocmask(0x0, &(0x7f0000000180), 0xffffffffffffffff, 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00', r0, &(0x7f0000001300)='./file0/../file0/../file0/../file0\x00', 0x5) write$binfmt_script(r0, &(0x7f0000001340)={'#! ', './file0/../file0/../file0/../file0', [{0x20, 'gre0\x00'}, {0x20, 'devtmpfs\x00'}, {0x20, '*'}, {0x20, 'gre0\x00'}, {0x20, '\x00\x00)\x88\x00\xf1'}, {0x20, '%{{'}, {0x20, 'aI\xff\xff\xff\xff'}], 0xa, "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"}, 0x156) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="43e6b4da4c60ae1bca5a5e5198", 0xd, 0x4080, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0xf7, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x4, 0x3, 0x1}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x10, 0x8, 0x0, 0x3ff, {{0x14, 0x4, 0x2, 0x23, 0x50, 0x65, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @local, {[@generic={0x0, 0xb, "81c0a635d11256e513"}, @noop, @cipso={0x86, 0x2d, 0x2, [{0x0, 0xb, "812405229c941f619d"}, {0x0, 0x5, "89101e"}, {0x7, 0x8, "a551756fc409"}, {0x2, 0xf, "f798af53f7b8d4587b449215f2"}]}]}}}}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) 1.81691363s ago: executing program 3 (id=1011): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffa000/0x3000)=nil], 0x0, &(0x7f0000000080), 0x0) 879.500785ms ago: executing program 2 (id=1012): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x54}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050008000000140004"], 0x58}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x723081, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x33, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r7, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) recvmsg(r4, &(0x7f0000000540)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000900)=""/240, 0xf0}], 0x4, &(0x7f0000006280)=""/4096, 0x1000}, 0x2000) syz_fuse_handle_req(r8, &(0x7f0000004280)="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", 0x2000, 0x0) syz_fuse_handle_req(r8, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 872.069395ms ago: executing program 4 (id=1013): socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) chdir(0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2d568d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6325b4fb369c2aab53751ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040), 0x368b, 0x200000) lseek(r2, 0x40, 0x2) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'RTX'}, {0x20, 'Wxtb'}, {0x20, 'x\xcbTu\xa0u\xb4Sv'}, {0x20, '^+]$)('}, {0x20, '-\xd6'}]}, 0x28) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x3, &(0x7f0000000500)={0x3, 0x0, 0x5}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'veth0_to_batadv\x00', &(0x7f0000000bc0)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffe}}) 767.689212ms ago: executing program 3 (id=1014): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r2], &(0x7f0000000040)}) 617.696176ms ago: executing program 0 (id=1015): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x0, 0x0, 0x0, 0xc6}, 0x48) 520.054815ms ago: executing program 1 (id=1016): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r2 = fanotify_init(0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, 0x0, 0x0) 469.013785ms ago: executing program 3 (id=1017): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x0) 422.610766ms ago: executing program 2 (id=1018): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 329.264457ms ago: executing program 3 (id=1019): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x100000, 0x0}, 0x10) 311.490621ms ago: executing program 0 (id=1020): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 264.636711ms ago: executing program 4 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7}}]}, 0x34}}, 0x0) 773.215µs ago: executing program 1 (id=1023): ioperm(0x0, 0x7, 0x40000000000006) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpgid(0x0) kcmp(r1, r1, 0x0, r0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff3d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000003c0)='subflow_check_data_avail\x00', r2}, 0x10) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x1a}, &(0x7f0000000040)=0x20) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 493.063µs ago: executing program 2 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x20008000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r2, 0x0, 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x401, 0x0) ustat(0x11, &(0x7f0000000600)) msgsnd(0x0, &(0x7f0000001280)={0x1}, 0x8, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) chmod(&(0x7f0000000180)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) 393.928µs ago: executing program 3 (id=1025): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1026): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000480)) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) lseek(r0, 0xa3b, 0x0) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered disabled state [ 150.956618][ T2946] bridge_slave_0: left allmulticast mode [ 150.963426][ T2946] bridge_slave_0: left promiscuous mode [ 150.988474][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.632209][ T2946] team0: Port device geneve0 removed [ 151.994148][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.044193][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.055541][ T2946] bond0 (unregistering): Released all slaves [ 152.676781][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 152.751849][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 153.363621][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.525908][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.593519][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.712131][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.026205][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 154.065597][ C1] eth0: bad gso: type: 1, size: 1408 [ 154.624593][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 154.667288][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.739945][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.409286][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 155.451599][ T6047] (unnamed net_device) (uninitialized): option ad_select: invalid value (4) [ 155.635919][ T2946] hsr_slave_0: left promiscuous mode [ 155.665640][ T2946] hsr_slave_1: left promiscuous mode [ 155.693517][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.709940][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.739412][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.758632][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.848104][ T2946] veth1_macvtap: left promiscuous mode [ 155.860224][ T2946] veth0_macvtap: left promiscuous mode [ 155.876325][ T2946] veth1_vlan: left promiscuous mode [ 155.898641][ T2946] veth0_vlan: left promiscuous mode [ 156.766591][ T6069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.809631][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 156.818934][ T6069] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 157.024801][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 157.115297][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 157.343537][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 157.724842][ T6074] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 158.150785][ T940] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 158.614172][ T940] usb 4-1: not running at top speed; connect to a high speed hub [ 158.996178][ T940] usb 4-1: config 0 has an invalid interface number: 16 but max is 2 [ 159.015147][ T940] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 159.040728][ T940] usb 4-1: config 0 has an invalid interface number: 166 but max is 2 [ 159.085060][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.101355][ T940] usb 4-1: config 0 has an invalid interface number: 17 but max is 2 [ 159.147090][ T940] usb 4-1: config 0 has no interface number 0 [ 159.184041][ T940] usb 4-1: config 0 has no interface number 1 [ 159.190218][ T940] usb 4-1: config 0 has no interface number 2 [ 159.223114][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.229903][ T940] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.273956][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.281299][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.293274][ T940] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 159.318278][ T940] usb 4-1: config 0 interface 16 altsetting 205 has a duplicate endpoint with address 0x9, skipping [ 159.331472][ T940] usb 4-1: config 0 interface 16 altsetting 205 has a duplicate endpoint with address 0x2, skipping [ 159.360681][ T940] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 159.372560][ T940] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 159.384250][ T940] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x7 has invalid maxpacket 1056, setting to 64 [ 159.414641][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.421885][ T5225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.485193][ T940] usb 4-1: config 0 interface 16 altsetting 205 has a duplicate endpoint with address 0x8, skipping [ 159.509775][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.517086][ T940] usb 4-1: config 0 interface 166 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 159.530091][ T940] usb 4-1: config 0 interface 166 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 159.567346][ T940] usb 4-1: config 0 interface 166 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 159.617605][ T940] usb 4-1: config 0 interface 17 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 159.632613][ T940] usb 4-1: config 0 interface 17 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 159.699734][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.747993][ T940] usb 4-1: config 0 interface 17 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 159.768469][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.775766][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.800660][ T940] usb 4-1: config 0 interface 17 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 159.854175][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.861416][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.870385][ T940] usb 4-1: config 0 interface 16 has no altsetting 0 [ 159.893142][ T940] usb 4-1: config 0 interface 17 has no altsetting 0 [ 159.935912][ T940] usb 4-1: New USB device found, idVendor=093a, idProduct=2468, bcdDevice=e4.25 [ 159.966437][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.998452][ T940] usb 4-1: Product: Л [ 160.038043][ T5732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.048591][ T940] usb 4-1: Manufacturer: చ [ 160.069081][ T940] usb 4-1: SerialNumber: syz [ 160.093477][ T940] usb 4-1: config 0 descriptor?? [ 160.130731][ T5732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.377995][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.674680][ T5743] veth0_vlan: entered promiscuous mode [ 160.767337][ T5743] veth1_vlan: entered promiscuous mode [ 160.767340][ T940] usb 4-1: USB disconnect, device number 5 [ 160.942922][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.065613][ T5743] veth0_macvtap: entered promiscuous mode [ 161.236383][ T5743] veth1_macvtap: entered promiscuous mode [ 161.416566][ C1] eth0: bad gso: type: 1, size: 1408 [ 161.453493][ T5732] veth0_vlan: entered promiscuous mode [ 161.500068][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.522280][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 161.536867][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.545079][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 161.573981][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.643879][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.674902][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.761898][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.790438][ T6135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.829425][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.880331][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.932183][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 161.943147][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.954070][ T6135] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 161.978209][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.991044][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.016266][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.030713][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.082381][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.159299][ T5732] veth1_vlan: entered promiscuous mode [ 162.216487][ T5743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.270506][ T5743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.312495][ T5743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.330465][ T5743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.727133][ T5732] veth0_macvtap: entered promiscuous mode [ 162.829307][ T5732] veth1_macvtap: entered promiscuous mode [ 163.033022][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.081600][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.114105][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.188606][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.252903][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.312634][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.362167][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.362347][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.362375][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.362391][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.376411][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.387148][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.387177][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.387191][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.387208][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.387221][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.387237][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.387255][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.387271][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.388975][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.526212][ T5732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.526304][ T5732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.526337][ T5732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.526369][ T5732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.552430][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.552459][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.046708][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.046736][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.174109][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.174138][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.850106][ T6209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.915243][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 166.943550][ T6209] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 166.971028][ T1190] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 167.173152][ T1190] usb 4-1: not running at top speed; connect to a high speed hub [ 167.187200][ T1190] usb 4-1: config 0 has an invalid interface number: 16 but max is 2 [ 167.208810][ T1190] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 167.236611][ T1190] usb 4-1: config 0 has an invalid interface number: 166 but max is 2 [ 167.257457][ T1190] usb 4-1: config 0 has an invalid interface number: 17 but max is 2 [ 167.292109][ T1190] usb 4-1: config 0 has no interface number 0 [ 167.313748][ T1190] usb 4-1: config 0 has no interface number 1 [ 167.342894][ T1190] usb 4-1: config 0 has no interface number 2 [ 167.363716][ T1190] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.624167][ T1190] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 167.866500][ T1190] usb 4-1: config 0 interface 16 altsetting 205 has a duplicate endpoint with address 0x9, skipping [ 167.950456][ T1190] usb 4-1: config 0 interface 16 altsetting 205 has a duplicate endpoint with address 0x2, skipping [ 168.016252][ T1190] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 168.341370][ T1190] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 168.406164][ T6240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 168.415333][ T1190] usb 4-1: config 0 interface 16 altsetting 205 endpoint 0x7 has invalid maxpacket 1056, setting to 64 [ 168.459639][ T1190] usb 4-1: config 0 interface 16 altsetting 205 has a duplicate endpoint with address 0x8, skipping [ 168.730371][ T1190] usb 4-1: config 0 interface 166 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 168.748635][ T1190] usb 4-1: config 0 interface 166 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 169.531066][ T1190] usb 4-1: config 0 interface 166 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 169.557375][ T1190] usb 4-1: config 0 interface 17 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 169.570808][ T1190] usb 4-1: config 0 interface 17 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 169.588909][ T1190] usb 4-1: config 0 interface 17 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 169.610711][ T1190] usb 4-1: config 0 interface 17 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 169.632534][ T1190] usb 4-1: config 0 interface 16 has no altsetting 0 [ 169.639385][ T1190] usb 4-1: config 0 interface 17 has no altsetting 0 [ 169.708887][ T1190] usb 4-1: string descriptor 0 read error: -71 [ 169.735195][ T1190] usb 4-1: New USB device found, idVendor=093a, idProduct=2468, bcdDevice=e4.25 [ 169.778780][ T1190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.825969][ T1190] usb 4-1: config 0 descriptor?? [ 169.851680][ T1190] usb 4-1: can't set config #0, error -71 [ 169.922085][ T1190] usb 4-1: USB disconnect, device number 6 [ 171.470822][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 171.470842][ T29] audit: type=1326 audit(1722238727.572:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6255 comm="syz.2.265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9575977299 code=0x0 [ 171.994541][ T6273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.932162][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 174.226830][ T29] audit: type=1326 audit(1722238730.632:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6303 comm="syz.1.280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff21eb77299 code=0x0 [ 176.124761][ T6323] netlink: 68 bytes leftover after parsing attributes in process `syz.3.284'. [ 176.142385][ C1] eth0: bad gso: type: 1, size: 1408 [ 176.146245][ T6323] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 177.672120][ T29] audit: type=1326 audit(1722238733.732:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb69b977299 code=0x0 [ 179.574024][ C1] eth0: bad gso: type: 1, size: 1408 [ 180.698690][ T6417] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 182.472462][ C1] eth0: bad gso: type: 1, size: 1408 [ 182.712536][ C1] eth0: bad gso: type: 1, size: 1408 [ 184.040858][ T940] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.273924][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.353896][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.367511][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 184.378471][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.541677][ T940] usb 5-1: config 0 descriptor?? [ 185.968473][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 185.980486][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.020031][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.099943][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.119627][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x2 [ 186.157424][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.185577][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.248033][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.281332][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.312339][ T940] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 186.393602][ T940] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 186.469274][ T940] usb 5-1: USB disconnect, device number 8 [ 186.864579][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.883552][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.893309][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.903073][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.913506][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.921598][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.045404][ C1] eth0: bad gso: type: 1, size: 1408 [ 187.291471][ T2963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.934952][ T2963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.186053][ T2963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.944679][ T6508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.013062][ T5233] Bluetooth: hci3: command tx timeout [ 191.193742][ T2963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.410169][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 191.447115][ T6510] ======================================================= [ 191.447115][ T6510] WARNING: The mand mount option has been deprecated and [ 191.447115][ T6510] and is ignored by this kernel. Remove the mand [ 191.447115][ T6510] option from the mount to silence this warning. [ 191.447115][ T6510] ======================================================= [ 191.565497][ T6518] kvm: emulating exchange as write [ 191.961959][ T2963] bridge_slave_1: left allmulticast mode [ 191.967681][ T2963] bridge_slave_1: left promiscuous mode [ 191.991003][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.030357][ T2963] bridge_slave_0: left allmulticast mode [ 192.043199][ T2963] bridge_slave_0: left promiscuous mode [ 192.049010][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.061222][ T5235] Bluetooth: hci3: command tx timeout [ 193.172634][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.211787][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.236637][ T2963] bond0 (unregistering): Released all slaves [ 193.329882][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.340569][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.360684][ T6478] bridge_slave_0: entered allmulticast mode [ 193.368887][ T6478] bridge_slave_0: entered promiscuous mode [ 193.377642][ T6534] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 193.561122][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.599673][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.623457][ T6478] bridge_slave_1: entered allmulticast mode [ 193.631385][ T6478] bridge_slave_1: entered promiscuous mode [ 193.841100][ T6551] netlink: 72 bytes leftover after parsing attributes in process `syz.1.353'. [ 193.863238][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 193.992321][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.034378][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.377433][ T6478] team0: Port device team_slave_0 added [ 194.487602][ T2963] hsr_slave_0: left promiscuous mode [ 194.586401][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.593045][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.754143][ T2963] hsr_slave_1: left promiscuous mode [ 194.773549][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.824084][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.951711][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.959191][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.140963][ T5233] Bluetooth: hci3: command tx timeout [ 195.263393][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.274404][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.288829][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.303139][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.313024][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.321475][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.407321][ T2963] veth1_macvtap: left promiscuous mode [ 195.421135][ T2963] veth0_macvtap: left promiscuous mode [ 195.426940][ T2963] veth1_vlan: left promiscuous mode [ 195.433689][ T2963] veth0_vlan: left promiscuous mode [ 196.302677][ T6584] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 197.221609][ T5233] Bluetooth: hci3: command tx timeout [ 197.381085][ T5233] Bluetooth: hci1: command tx timeout [ 197.990427][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 198.079001][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 198.513499][ T6478] team0: Port device team_slave_1 added [ 198.528805][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 198.764094][ T6593] netlink: 'syz.1.362': attribute type 4 has an invalid length. [ 198.819663][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.853394][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.896656][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.919130][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.928023][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.966802][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.192187][ T6598] netlink: 68 bytes leftover after parsing attributes in process `syz.4.363'. [ 199.239164][ T6598] netlink: 6 bytes leftover after parsing attributes in process `syz.4.363'. [ 199.354832][ T6608] mmap: syz.4.363 (6608) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.398613][ T6608] capability: warning: `syz.4.363' uses deprecated v2 capabilities in a way that may be insecure [ 199.410398][ T6608] program syz.4.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.460745][ T5233] Bluetooth: hci1: command tx timeout [ 199.516003][ T6478] hsr_slave_0: entered promiscuous mode [ 199.588551][ T6478] hsr_slave_1: entered promiscuous mode [ 199.669041][ T6478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.746598][ T6478] Cannot create hsr debugfs directory [ 200.243480][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.367'. [ 200.808657][ T2963] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.064612][ T2963] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.208598][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 201.305272][ T2963] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.541021][ T5227] Bluetooth: hci1: command tx timeout [ 201.780962][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 201.787400][ T5227] Bluetooth: hci0: command 0x0406 tx timeout [ 201.809859][ T2963] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.639833][ T5233] Bluetooth: hci1: command tx timeout [ 204.063301][ T6668] netlink: 'syz.1.373': attribute type 4 has an invalid length. [ 204.078044][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.092533][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.099980][ T6578] bridge_slave_0: entered allmulticast mode [ 204.131615][ T6578] bridge_slave_0: entered promiscuous mode [ 204.216141][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.231764][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.242083][ T6578] bridge_slave_1: entered allmulticast mode [ 204.250020][ T6578] bridge_slave_1: entered promiscuous mode [ 204.407191][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.448166][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.569268][ T2963] bridge_slave_1: left allmulticast mode [ 204.578176][ T2963] bridge_slave_1: left promiscuous mode [ 204.584726][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.597873][ T2963] bridge_slave_0: left allmulticast mode [ 204.606270][ T2963] bridge_slave_0: left promiscuous mode [ 204.612684][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.490359][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.512032][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.530220][ T2963] bond0 (unregistering): Released all slaves [ 205.597518][ T6578] team0: Port device team_slave_0 added [ 205.723940][ T6578] team0: Port device team_slave_1 added [ 205.951960][ T6478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.985713][ T6478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.205211][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.220169][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.286501][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.319965][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.341427][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.343280][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.378178][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.387302][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.400022][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.404405][ T6478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.411980][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.425955][ T6478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.438449][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.450886][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.784568][ T5220] syz-executor (5220) used greatest stack depth: 19416 bytes left [ 207.578927][ T6578] hsr_slave_0: entered promiscuous mode [ 207.613863][ T6578] hsr_slave_1: entered promiscuous mode [ 207.636593][ T6578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.662776][ T6578] Cannot create hsr debugfs directory [ 207.717819][ T2963] hsr_slave_0: left promiscuous mode [ 207.732509][ T2963] hsr_slave_1: left promiscuous mode [ 207.771259][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.780700][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.799748][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.820791][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.979045][ T2963] veth1_macvtap: left promiscuous mode [ 207.990816][ T2963] veth0_macvtap: left promiscuous mode [ 207.998423][ T2963] veth1_vlan: left promiscuous mode [ 208.008813][ T2963] veth0_vlan: left promiscuous mode [ 208.503999][ T5235] Bluetooth: hci0: command tx timeout [ 208.523042][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 208.571992][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 208.998992][ T6719] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 209.800290][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.967576][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.988330][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.995635][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.089865][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.097266][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.185270][ T6698] chnl_net:caif_netlink_parms(): no params data found [ 210.269708][ T2963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.428850][ T2963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.581151][ T5235] Bluetooth: hci0: command tx timeout [ 210.655479][ T2963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.694019][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 210.788168][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.812168][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.819484][ T6698] bridge_slave_0: entered allmulticast mode [ 210.862384][ T6698] bridge_slave_0: entered promiscuous mode [ 210.897389][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.909356][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.051863][ T6698] bridge_slave_1: entered allmulticast mode [ 211.059471][ T6698] bridge_slave_1: entered promiscuous mode [ 211.164786][ T2963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.183367][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.279242][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.494432][ T6578] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.577858][ T6698] team0: Port device team_slave_0 added [ 212.599600][ T6698] team0: Port device team_slave_1 added [ 212.660763][ T5235] Bluetooth: hci0: command tx timeout [ 212.703111][ T6578] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.775581][ T6578] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.843415][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.853996][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.854453][ T6578] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.871444][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.882747][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.894205][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.902894][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.932750][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.943570][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.985091][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.062856][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.076517][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.111940][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.250049][ T2963] bridge_slave_1: left allmulticast mode [ 213.266795][ T2963] bridge_slave_1: left promiscuous mode [ 213.279135][ T2963] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.288741][ T2963] bridge_slave_0: left allmulticast mode [ 213.295108][ T2963] bridge_slave_0: left promiscuous mode [ 213.301237][ T2963] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.839414][ T2963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.860763][ T2963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.874192][ T2963] bond0 (unregistering): Released all slaves [ 213.899754][ T6698] hsr_slave_0: entered promiscuous mode [ 213.907915][ T6698] hsr_slave_1: entered promiscuous mode [ 213.916171][ T6698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.924222][ T6698] Cannot create hsr debugfs directory [ 214.005843][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.540233][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.563642][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.599573][ T2963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.631139][ T2963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.669588][ T2963] hsr0: left allmulticast mode [ 214.674656][ T2963] veth1_macvtap: left promiscuous mode [ 214.680241][ T2963] veth0_macvtap: left promiscuous mode [ 214.687145][ T2963] veth1_vlan: left promiscuous mode [ 214.692920][ T2963] veth0_vlan: left promiscuous mode [ 214.740939][ T5233] Bluetooth: hci0: command tx timeout [ 214.983155][ T5233] Bluetooth: hci2: command tx timeout [ 215.381002][ T2963] team0 (unregistering): Port device team_slave_1 removed [ 215.428168][ T2963] team0 (unregistering): Port device team_slave_0 removed [ 216.149948][ T6478] veth0_vlan: entered promiscuous mode [ 216.177043][ T6478] veth1_vlan: entered promiscuous mode [ 216.203227][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.370011][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.460257][ T6800] chnl_net:caif_netlink_parms(): no params data found [ 216.508477][ T6478] veth0_macvtap: entered promiscuous mode [ 216.528915][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.536483][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.628001][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.635229][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.658059][ T6478] veth1_macvtap: entered promiscuous mode [ 216.703289][ T6698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.735800][ T6698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.787097][ T6698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.803099][ T6698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.827538][ T6800] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.835701][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.843742][ T6800] bridge_slave_0: entered allmulticast mode [ 216.851635][ T6800] bridge_slave_0: entered promiscuous mode [ 216.860023][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.867801][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.875260][ T6800] bridge_slave_1: entered allmulticast mode [ 216.882974][ T6800] bridge_slave_1: entered promiscuous mode [ 216.944780][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.957099][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.967232][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.978427][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.991313][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.012907][ T6800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.035489][ T6800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.062256][ T5233] Bluetooth: hci2: command tx timeout [ 217.117278][ T6800] team0: Port device team_slave_0 added [ 217.133002][ T6800] team0: Port device team_slave_1 added [ 217.157807][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.171735][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.183050][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.193651][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.205772][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.264343][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.273318][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.299276][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.306790][ T6800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.329337][ T6478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.338642][ T6478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.348329][ T6478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.357300][ T6478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.378520][ T6800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.388095][ T6800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.416170][ T6800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.508209][ T6800] hsr_slave_0: entered promiscuous mode [ 217.516236][ T6800] hsr_slave_1: entered promiscuous mode [ 217.523113][ T6800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.530796][ T6800] Cannot create hsr debugfs directory [ 217.583576][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.678681][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.705846][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.769709][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.785527][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.936830][ T6800] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.066286][ T6800] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.089727][ T6578] veth0_vlan: entered promiscuous mode [ 218.116668][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.192804][ T6800] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.215976][ T6578] veth1_vlan: entered promiscuous mode [ 218.247410][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.311192][ T6800] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.367892][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.375575][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.462319][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.469486][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.486770][ T6578] veth0_macvtap: entered promiscuous mode [ 218.499977][ T6578] veth1_macvtap: entered promiscuous mode [ 218.517161][ T6861] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 218.656862][ T6861] syz.2.400 (6861) used greatest stack depth: 18576 bytes left [ 218.688407][ T6800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.706076][ T6800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.725559][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.747307][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.758782][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.777530][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.789341][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.800348][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.815302][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.832852][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.850439][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.869447][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.880712][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.898703][ T6578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.917889][ T6578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.931199][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.950545][ T6800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.980433][ T6578] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.992491][ T6578] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.003109][ T6578] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.012370][ T6578] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.024928][ T6800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.141641][ T5233] Bluetooth: hci2: command tx timeout [ 219.339060][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.362127][ T5278] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 219.369908][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.433284][ T6800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.445836][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.467468][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.477949][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.512576][ T6800] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.563762][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.578921][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.586215][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.604287][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.809181][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.816418][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.824326][ T5278] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 219.835389][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.870018][ T5278] usb 3-1: config 0 descriptor?? [ 221.150348][ T6878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.067028][ T5233] Bluetooth: hci2: command tx timeout [ 222.341081][ T5278] usbhid 3-1:0.0: can't add hid device: -71 [ 222.347157][ T5278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 222.378963][ T6800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.414325][ T5278] usb 3-1: USB disconnect, device number 5 [ 222.441540][ T6800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.886247][ T29] audit: type=1326 audit(1722238779.292:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.2.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1491177299 code=0x0 [ 223.352649][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 223.446410][ T6698] veth0_vlan: entered promiscuous mode [ 223.536088][ T6698] veth1_vlan: entered promiscuous mode [ 223.817797][ T6698] veth0_macvtap: entered promiscuous mode [ 223.848710][ T6698] veth1_macvtap: entered promiscuous mode [ 223.959587][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.974190][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.984983][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.010470][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.026756][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.038893][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.049596][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.062522][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.076783][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.107082][ T6800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.144538][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.159147][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.169825][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.191054][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.210665][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.226076][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.236523][ T6698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.247520][ T6698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.268076][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.329400][ T6904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.339076][ T6904] team0: Port device bond0 added [ 224.352724][ T6698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.380699][ T6698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.389469][ T6698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.414576][ T6698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.276207][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.528208][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.549559][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.704937][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.756766][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.806154][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.817655][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.826797][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.845294][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.866400][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 227.874950][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.888350][ T6923] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 227.955068][ T6800] veth0_vlan: entered promiscuous mode [ 228.023447][ T6800] veth1_vlan: entered promiscuous mode [ 228.303658][ T6800] veth0_macvtap: entered promiscuous mode [ 228.338432][ T6800] veth1_macvtap: entered promiscuous mode [ 228.358711][ T6938] netlink: 'syz.2.421': attribute type 28 has an invalid length. [ 228.405326][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.417331][ T6936] team0: Port device bond0 added [ 228.450299][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.474286][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.494447][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.509026][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.534420][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.555092][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.565656][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.585537][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.599197][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.610815][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.645799][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.680192][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.693345][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.704424][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.717640][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.727649][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.738414][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.751770][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.762782][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.773051][ T6800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.783862][ T6800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.799162][ T6800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.836793][ T6800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.846287][ T6800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.856066][ T6800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.866672][ T6800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.115530][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 229.207229][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.218708][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.398528][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.432410][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.439749][ T6924] bridge_slave_0: entered allmulticast mode [ 229.455884][ T6924] bridge_slave_0: entered promiscuous mode [ 229.470546][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.478103][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.488570][ T6924] bridge_slave_1: entered allmulticast mode [ 229.496792][ T6924] bridge_slave_1: entered promiscuous mode [ 229.507205][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.519281][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.587312][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.603111][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.738437][ T6924] team0: Port device team_slave_0 added [ 229.753928][ T6924] team0: Port device team_slave_1 added [ 229.819262][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.828441][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.857824][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.873639][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.881080][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.908808][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.943337][ T5233] Bluetooth: hci4: command tx timeout [ 230.005035][ T6924] hsr_slave_0: entered promiscuous mode [ 230.019158][ T6924] hsr_slave_1: entered promiscuous mode [ 230.037900][ T6924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.051099][ T6924] Cannot create hsr debugfs directory [ 230.285706][ T6924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.385551][ T6924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.488924][ T6924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.614254][ T6924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.746615][ T6980] lo: entered allmulticast mode [ 230.810424][ T6924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.823793][ T6924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.849001][ T6924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.868601][ T6924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.033109][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.079826][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.135994][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.143220][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.192995][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.200286][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.211241][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 231.941900][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.021448][ T5233] Bluetooth: hci4: command tx timeout [ 232.227428][ T6924] veth0_vlan: entered promiscuous mode [ 232.373429][ T6924] veth1_vlan: entered promiscuous mode [ 232.862823][ T6924] veth0_macvtap: entered promiscuous mode [ 232.931523][ T6924] veth1_macvtap: entered promiscuous mode [ 232.998440][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.010439][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.021956][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.032650][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.049599][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.073474][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.086820][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.097829][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.108190][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.121144][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.145588][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.158697][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.174355][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.229573][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.243461][ T5277] kernel write not supported for file /30/projid_map (pid: 5277 comm: kworker/0:4) [ 233.263796][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.284027][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.311447][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.335620][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.369342][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.388791][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.410017][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.433401][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.465442][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.484437][ T6924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.498847][ T6924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.526584][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 233.529429][ T6924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.552208][ T7022] netlink: 'syz.4.450': attribute type 28 has an invalid length. [ 233.588474][ T6924] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.599545][ T6924] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.610463][ T6924] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.620258][ T6924] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.859831][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.886220][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.964416][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.001657][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.101748][ T5233] Bluetooth: hci4: command tx timeout [ 234.225174][ T7039] netdevsim netdevsim3: Direct firmware load for WZ failed with error -2 [ 234.236415][ T7039] netdevsim netdevsim3: Falling back to sysfs fallback for: WZ [ 234.290249][ T7040] [U] I݀ [ 234.297964][ T7040] [U] % [ 234.304724][ C1] eth0: bad gso: type: 1, size: 1408 [ 234.314068][ T7040] [U] VA*L4JN$ [ 234.452719][ T7045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.405481][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'. [ 235.656908][ C1] eth0: bad gso: type: 1, size: 1408 [ 236.186238][ T5233] Bluetooth: hci4: command tx timeout [ 237.015551][ T5276] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 237.224824][ T5276] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 237.270693][ T5276] usb 2-1: config 0 has no interface number 0 [ 237.298092][ T5276] usb 2-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 237.346373][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.388483][ T5276] usb 2-1: config 0 descriptor?? [ 237.412583][ T5276] usb 2-1: can't set first interface for hiFace device. [ 237.430768][ T5276] snd-usb-hiface 2-1:0.153: probe with driver snd-usb-hiface failed with error -5 [ 237.646490][ T7099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.546794][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.483'. [ 238.614115][ T940] kernel write not supported for file /36/projid_map (pid: 940 comm: kworker/0:2) [ 239.023781][ T5276] usb 2-1: USB disconnect, device number 3 [ 239.478962][ T7134] Zero length message leads to an empty skb [ 239.858290][ T7151] dccp_close: ABORT with 8691 bytes unread [ 241.446865][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.500'. [ 241.972372][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.011281][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.033242][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.053264][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.075261][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.088865][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.105533][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.129715][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.148565][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.159364][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.167495][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.177098][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.186670][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.205569][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.218309][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.232211][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.257175][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.266212][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.276904][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.289411][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.298797][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.307069][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.324079][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.357315][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.383928][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.421793][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.442436][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.460835][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.488616][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.503873][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.530857][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.562865][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.595377][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.617827][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.649175][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.693291][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.712342][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.725120][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.746515][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.771913][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.788895][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.817521][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.840271][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.879923][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.907193][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.918274][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 242.954547][ T940] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 243.044351][ T940] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 243.333212][ T7187] syz.3.510 uses obsolete (PF_INET,SOCK_PACKET) [ 243.411083][ T35] bridge_slave_1: left allmulticast mode [ 243.416861][ T35] bridge_slave_1: left promiscuous mode [ 244.618386][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.740045][ T35] bridge_slave_0: left allmulticast mode [ 246.779867][ T35] bridge_slave_0: left promiscuous mode [ 246.801373][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.870123][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.880528][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.888976][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.897166][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.907844][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.915985][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.073221][ T7198] [U] I݀ [ 247.106189][ T7198] [U] % [ 247.109257][ T7198] [U] VA*L4JN$ [ 248.374585][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.399142][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.451497][ T35] bond0 (unregistering): Released all slaves [ 248.502952][ T7194] netdevsim netdevsim2: Direct firmware load for WZ failed with error -2 [ 248.520756][ T7194] netdevsim netdevsim2: Falling back to sysfs fallback for: WZ [ 248.984022][ T5233] Bluetooth: hci4: command tx timeout [ 249.716861][ T35] hsr_slave_0: left promiscuous mode [ 249.730070][ T35] hsr_slave_1: left promiscuous mode [ 249.949197][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.972042][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.147594][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.591324][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.714685][ T35] veth1_macvtap: left promiscuous mode [ 250.720301][ T35] veth0_macvtap: left promiscuous mode [ 250.744887][ T35] veth1_vlan: left promiscuous mode [ 250.750312][ T35] veth0_vlan: left promiscuous mode [ 250.847312][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.865436][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.886618][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.913272][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.934995][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.952336][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 250.982339][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.009261][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.051599][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.060961][ T5233] Bluetooth: hci4: command tx timeout [ 251.076775][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.114920][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.152689][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.179876][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.388208][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.412803][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.434038][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 251.459476][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.318128][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.325775][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.333548][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.347747][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.355545][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.369786][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.378203][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.386180][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.395069][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.403417][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.412045][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.419993][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.431426][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.448397][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.474250][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.497941][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.513130][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.533824][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.542961][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.551688][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.559560][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.568567][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.587301][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.600375][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.632565][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.645213][ T940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 252.671648][ T940] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 253.017156][ T35] team0 (unregistering): Port device team_slave_1 removed [ 253.066451][ T35] team0 (unregistering): Port device team_slave_0 removed [ 253.145105][ T5233] Bluetooth: hci4: command tx timeout [ 253.897550][ T7191] chnl_net:caif_netlink_parms(): no params data found [ 253.943421][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.024961][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 254.406993][ T5275] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 254.449707][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.492125][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 255.512759][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.528680][ T5233] Bluetooth: hci4: command tx timeout [ 255.532589][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 256.091749][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.156125][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.202058][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 257.268776][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 257.329747][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.419977][ T5275] usb 3-1: config 0 descriptor?? [ 257.443066][ T5275] usb 3-1: can't set config #0, error -71 [ 257.481148][ T5275] usb 3-1: USB disconnect, device number 6 [ 257.576601][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.617880][ T7191] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.649041][ T7191] bridge_slave_0: entered allmulticast mode [ 257.689624][ T7191] bridge_slave_0: entered promiscuous mode [ 257.765973][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.791303][ T7191] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.831052][ T7191] bridge_slave_1: entered allmulticast mode [ 257.876784][ T7191] bridge_slave_1: entered promiscuous mode [ 257.978170][ T7332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.060849][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 258.097087][ T7332] IPv6: NLM_F_REPLACE set, but no existing node found! [ 258.153710][ T7191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.230871][ T7191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.148022][ T7191] team0: Port device team_slave_0 added [ 260.174067][ T7191] team0: Port device team_slave_1 added [ 260.430099][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.454612][ T29] audit: type=1804 audit(1722238816.852:130): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.546" name="/newroot/32/file0/bus/file0" dev="ramfs" ino=20516 res=1 errno=0 [ 260.490678][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.572035][ T7191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.622228][ T7191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.659801][ T7191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.691906][ T5278] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 260.730662][ T7191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.911294][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 260.933754][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.955792][ T7191] hsr_slave_0: entered promiscuous mode [ 260.979474][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 261.001199][ T7191] hsr_slave_1: entered promiscuous mode [ 261.011468][ T7191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.019152][ T7191] Cannot create hsr debugfs directory [ 261.026071][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 261.052066][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.065923][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.081890][ T5278] usb 3-1: config 0 descriptor?? [ 261.087747][ T7353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.149099][ T5278] hub 3-1:0.0: USB hub found [ 261.381427][ T5278] hub 3-1:0.0: 2 ports detected [ 261.628965][ T7382] UBIFS error (pid: 7382): cannot open "./file0", error -22 [ 263.156133][ T7191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.213838][ T7191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.280313][ T7191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.296423][ T29] audit: type=1326 audit(1722238819.702:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f816f177299 code=0x0 [ 263.372589][ T7191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.742092][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.814635][ T7191] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.862274][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.869541][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.920032][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.927320][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.016148][ T5275] usb 3-1: USB disconnect, device number 7 [ 264.265789][ T7425] UBIFS error (pid: 7425): cannot open "./file0", error -22 [ 264.723476][ T7191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.737374][ T7191] veth0_vlan: entered promiscuous mode [ 265.786363][ T7191] veth1_vlan: entered promiscuous mode [ 265.966901][ T7191] veth0_macvtap: entered promiscuous mode [ 265.979680][ T7191] veth1_macvtap: entered promiscuous mode [ 266.705500][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.760998][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.792862][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.830708][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.860803][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.882139][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.954305][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.965599][ T29] audit: type=1326 audit(1722238823.372:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7463 comm="syz.0.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00a2177299 code=0x0 [ 266.989201][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.011435][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.035416][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.054857][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.067301][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.097130][ T7472] UBIFS error (pid: 7472): cannot open "./file0", error -22 [ 267.104898][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.122269][ T5225] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 267.168473][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.194693][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.218286][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.244510][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.269324][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.280180][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.290638][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.301585][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.311754][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.323590][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.333804][ T7191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.353036][ T7191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.367053][ T7191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.367051][ T5225] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=cb.23 [ 267.367086][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.398413][ T7191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.449864][ T7191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.470306][ T5225] usb 4-1: config 0 descriptor?? [ 267.481529][ T7191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.493607][ T5225] mdc800 4-1:0.0: probe fails -> wrong Interface [ 267.511505][ T7191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.824188][ T5275] usb 4-1: USB disconnect, device number 7 [ 267.972379][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.980238][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.130676][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.142533][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.182160][ T5277] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 268.390761][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 268.421450][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.484892][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 268.546939][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.620803][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 268.630095][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.731825][ T5277] usb 5-1: config 0 descriptor?? [ 268.737887][ T7484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.789684][ T5277] hub 5-1:0.0: USB hub found [ 269.011390][ T5277] hub 5-1:0.0: 2 ports detected [ 270.010807][ T5299] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 270.220839][ T5299] usb 2-1: Using ep0 maxpacket: 32 [ 270.228456][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.261947][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.295424][ T5299] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 270.321673][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.350375][ T5299] usb 2-1: config 0 descriptor?? [ 270.844329][ T5299] ft260 0003:0403:6030.0005: item fetching failed at offset 0/2 [ 270.874860][ T5299] ft260 0003:0403:6030.0005: failed to parse HID [ 270.890775][ T5299] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -22 [ 271.130118][ T5277] usb 2-1: USB disconnect, device number 4 [ 271.162972][ T5299] usb 5-1: USB disconnect, device number 9 [ 271.163169][ T5278] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 273.669357][ T7594] rdma_op ffff8880701bd1f0 conn xmit_rdma 0000000000000000 [ 273.973338][ T5275] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 274.211879][ T5275] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.242288][ T5275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.297759][ T5275] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.334545][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.368051][ T5275] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 274.391535][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.486586][ T5275] usb 3-1: SerialNumber: syz [ 274.777222][ T5275] usb 3-1: 0:2 : does not exist [ 274.929709][ T5275] usb 3-1: USB disconnect, device number 8 [ 275.235688][ T5582] udevd[5582]: setting mode of /dev/bus/usb/003/008 to 020664 failed: No such file or directory [ 275.507260][ T5582] udevd[5582]: setting owner of /dev/bus/usb/003/008 to uid=0, gid=0 failed: No such file or directory [ 275.649382][ T5582] udevd[5582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.821330][ T940] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 276.016571][ T7641] block nbd1: shutting down sockets [ 276.039111][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.052072][ T940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.077957][ T940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.107684][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.128938][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 276.164227][ T940] usb 4-1: config 0 descriptor?? [ 277.474711][ T940] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 277.573816][ T940] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 277.582442][ T940] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 277.593607][ T940] plantronics 0003:047F:FFFF.0006: parse failed [ 277.599944][ T940] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 277.619658][ T940] usb 4-1: USB disconnect, device number 8 [ 279.150977][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.591576][ T5299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 283.778237][ T7728] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 283.801952][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 283.819650][ T5299] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 283.860093][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.079985][ T5299] usb 2-1: Product: syz [ 284.089020][ T5233] Bluetooth: hci1: SCO packet for unknown connection handle 2096 [ 284.097669][ T5299] usb 2-1: Manufacturer: syz [ 284.427553][ T5299] usb 2-1: SerialNumber: syz [ 284.464540][ T5299] usb 2-1: config 0 descriptor?? [ 285.079612][ T7728] team0: Failed to send options change via netlink (err -105) [ 285.104323][ T7728] team0: Port device netdevsim0 added [ 285.122527][ T5299] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 285.242640][ T5299] usb 2-1: USB disconnect, device number 5 [ 285.258436][ T2924] usb 2-1: Failed to submit usb control message: -71 [ 285.281430][ T7732] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 285.297442][ T2924] usb 2-1: unable to send the bmi data to the device: -71 [ 285.323553][ T2924] usb 2-1: unable to get target info from device [ 285.348066][ T2924] usb 2-1: could not get target info (-71) [ 285.363234][ T2924] usb 2-1: could not probe fw (-71) [ 285.427940][ T7732] team0: Port device netdevsim0 removed [ 285.479177][ T7732] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 285.986573][ T7764] netlink: 'syz.1.651': attribute type 29 has an invalid length. [ 285.998128][ T7764] netlink: 'syz.1.651': attribute type 29 has an invalid length. [ 286.058607][ T5299] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 286.253162][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.270716][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.285718][ T5299] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.297015][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.309262][ T5299] usb 5-1: config 0 descriptor?? [ 286.728900][ T5299] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 286.763705][ T5299] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input7 [ 286.989127][ T5299] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 287.185320][ T1190] usb 5-1: USB disconnect, device number 10 [ 287.410688][ T5299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 287.595903][ T5299] usb 2-1: too many configurations: 222, using maximum allowed: 8 [ 287.615547][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.651624][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.664398][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.682474][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.697043][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.713810][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.726650][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.748762][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.775207][ T5299] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.806937][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.839564][ T5299] usb 2-1: config 0 descriptor?? [ 287.862636][ T5299] pwc: Askey VC010 type 2 USB webcam detected. [ 287.889637][ T5299] pwc: Warning: more than 1 configuration available. [ 287.923108][ T7784] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 288.250708][ T5299] pwc: send_video_command error -71 [ 288.256782][ T5299] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 288.269670][ T5299] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 288.293012][ T5299] usb 2-1: USB disconnect, device number 6 [ 288.414905][ T7791] Invalid ELF header magic: != ELF [ 288.534730][ T7791] Bluetooth: MGMT ver 1.23 [ 289.749983][ T7807] netlink: 'syz.1.669': attribute type 21 has an invalid length. [ 289.772477][ T7807] netlink: 100 bytes leftover after parsing attributes in process `syz.1.669'. [ 290.010753][ T5299] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 290.070699][ T7188] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.208027][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.228491][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.238852][ T5299] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.249132][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.273451][ T7188] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.284146][ T7188] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.296663][ T5299] usb 3-1: config 0 descriptor?? [ 290.305428][ T7188] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.321803][ T7188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.333842][ T7188] usb 2-1: SerialNumber: syz [ 290.583251][ T7188] usb 2-1: 0:2 : does not exist [ 290.596378][ T7188] usb 2-1: unit 255 not found! [ 290.683023][ T7188] usb 2-1: USB disconnect, device number 7 [ 290.771874][ T5299] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 290.812055][ T5299] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input8 [ 290.838158][ T7830] netlink: 'syz.3.680': attribute type 29 has an invalid length. [ 290.869806][ T7830] netlink: 'syz.3.680': attribute type 29 has an invalid length. [ 290.887891][ T7832] rdma_op ffff88805f0b29f0 conn xmit_rdma 0000000000000000 [ 290.945722][ T5299] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 290.995927][ T5576] udevd[5576]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.210745][ T5278] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 291.322761][ T6871] usb 3-1: USB disconnect, device number 9 [ 291.444313][ T5278] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.525830][ T5278] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.578962][ T5278] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.612979][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.659926][ T5278] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 291.709408][ T5278] usb 5-1: SerialNumber: syz [ 292.933929][ T5278] usb 5-1: 0:2 : does not exist [ 292.996641][ T5278] usb 5-1: USB disconnect, device number 11 [ 293.765931][ T7855] syz.1.689: attempt to access beyond end of device [ 293.765931][ T7855] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 293.832933][ T7855] F2FS-fs (loop3): Unable to read 1th superblock [ 293.862417][ T7855] syz.1.689: attempt to access beyond end of device [ 293.862417][ T7855] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 293.895334][ T7855] F2FS-fs (loop3): Unable to read 2th superblock [ 293.964587][ T5582] udevd[5582]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.991212][ T7858] syz.1.689: attempt to access beyond end of device [ 293.991212][ T7858] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 294.032149][ T7858] F2FS-fs (loop3): Unable to read 1th superblock [ 294.120510][ T7858] syz.1.689: attempt to access beyond end of device [ 294.120510][ T7858] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 294.170727][ T7858] F2FS-fs (loop3): Unable to read 2th superblock [ 294.436176][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 294.500824][ T5277] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 294.575898][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 294.684078][ T7883] warning: `syz.2.698' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 294.826210][ T7188] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 294.953414][ T7889] sp0: Synchronizing with TNC [ 295.044260][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 295.137083][ T5277] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 295.318585][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.641654][ T5277] usb 4-1: config 0 descriptor?? [ 295.756082][ T7188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.777391][ T7188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.798518][ T7188] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.841170][ T7188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.879963][ T7188] usb 5-1: config 0 descriptor?? [ 296.111819][ T7867] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.693' sets config #0 [ 296.153974][ T5277] usb 4-1: string descriptor 0 read error: -71 [ 296.164708][ T5277] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 296.186608][ T5277] usb 4-1: unknown interface protocol 0xe6, assuming v1 [ 296.195481][ T5277] usb 4-1: cannot find UAC_HEADER [ 296.227391][ T5277] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 296.245847][ T5277] usb 4-1: USB disconnect, device number 9 [ 296.373626][ T7188] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 296.426401][ T7188] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input9 [ 296.461671][ T7906] rdma_op ffff88807d5a61f0 conn xmit_rdma 0000000000000000 [ 296.474946][ T5582] udevd[5582]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.546699][ T7188] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 296.770948][ T5277] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 296.860092][ T1190] usb 5-1: USB disconnect, device number 12 [ 296.965350][ T5277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.975834][ T5277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.994294][ T5277] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.004960][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.014653][ T5277] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 297.044325][ T5277] usb 2-1: SerialNumber: syz [ 297.427893][ T5277] usb 2-1: 0:2 : does not exist [ 297.531164][ T5277] usb 2-1: USB disconnect, device number 8 [ 297.863696][ T7918] debugfs: Directory 'netdev:nicvf0' with parent 'phy21' already present! [ 297.882410][ T5582] udevd[5582]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.892256][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'. [ 298.384303][ T7935] netlink: 'syz.4.719': attribute type 21 has an invalid length. [ 298.397824][ T7935] netlink: 100 bytes leftover after parsing attributes in process `syz.4.719'. [ 299.131192][ T1190] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 299.768098][ T1190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.789047][ T1190] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.810315][ T1190] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 299.827750][ T1190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 299.837682][ T1190] usb 5-1: SerialNumber: syz [ 300.121849][ T1190] usb 5-1: 0:2 : does not exist [ 300.126868][ T1190] usb 5-1: unit 255 not found! [ 300.209482][ T1190] usb 5-1: USB disconnect, device number 13 [ 300.582247][ T5582] udevd[5582]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.862725][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 301.540724][ T940] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 301.741378][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 301.766994][ T940] usb 4-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 301.802045][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.826283][ T940] usb 4-1: Product: syz [ 301.850629][ T940] usb 4-1: Manufacturer: syz [ 301.871029][ T940] usb 4-1: SerialNumber: syz [ 301.891996][ T940] usb 4-1: config 0 descriptor?? [ 301.924040][ T940] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 301.963573][ T940] pctv452e: pctv452e_power_ctrl: 1 [ 301.963573][ T940] [ 301.991772][ T940] usb 4-1: selecting invalid altsetting 3 [ 302.021181][ T940] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 302.021181][ T940] [ 302.043533][ T940] dvb-usb: bulk message failed: -22 (5/0) [ 302.108502][ T940] dvb-usb: PCTV HDTV USB error while loading driver (-22) [ 302.419638][ T5299] usb 4-1: USB disconnect, device number 10 [ 302.568961][ T7999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.742'. [ 302.578187][ T7999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.742'. [ 303.961640][ T8009] team_slave_0: entered allmulticast mode [ 308.688385][ T8059] overlayfs: missing 'lowerdir' [ 309.601025][ T8073] cgroup: none used incorrectly [ 310.101041][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 311.321828][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 311.405602][ T29] audit: type=1326 audit(1722238867.812:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8087 comm="syz.4.777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba6c377299 code=0x0 [ 311.623879][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.641228][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.653900][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.663975][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.673769][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 311.682605][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.877271][ T8103] overlayfs: missing 'lowerdir' [ 312.661068][ T8107] netem: change failed [ 312.998498][ T29] audit: type=1804 audit(1722238869.392:134): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.783" name="/newroot/41/bus/file0" dev="overlay" ino=243 res=1 errno=0 [ 313.033934][ T8116] vlan2: entered promiscuous mode [ 313.039044][ T8116] vlan2: entered allmulticast mode [ 313.120420][ T8116] bond0: entered allmulticast mode [ 313.159495][ T8116] bond_slave_0: entered allmulticast mode [ 313.181971][ T8116] bond_slave_1: entered allmulticast mode [ 313.221175][ T8116] bond0: entered promiscuous mode [ 313.248776][ T8116] bond_slave_0: entered promiscuous mode [ 313.271196][ T8116] bond_slave_1: entered promiscuous mode [ 313.316876][ T8116] bond0: left allmulticast mode [ 313.338678][ T8116] bond_slave_0: left allmulticast mode [ 313.358997][ T8116] bond_slave_1: left allmulticast mode [ 313.374854][ T8116] bond0: left promiscuous mode [ 313.379736][ T8116] bond_slave_0: left promiscuous mode [ 313.400976][ T8116] bond_slave_1: left promiscuous mode [ 313.768035][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 313.781295][ T5233] Bluetooth: hci5: command tx timeout [ 313.796090][ T8135] tmpfs: Bad value for 'mpol' [ 313.937255][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 314.699322][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.722384][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.732883][ T8098] bridge_slave_0: entered allmulticast mode [ 314.788705][ T8098] bridge_slave_0: entered promiscuous mode [ 314.862999][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.876439][ T8155] cgroup: none used incorrectly [ 314.994158][ T8153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.792'. [ 315.125817][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.161150][ T8098] bridge_slave_1: entered allmulticast mode [ 315.172504][ T8098] bridge_slave_1: entered promiscuous mode [ 315.861169][ T5233] Bluetooth: hci5: command tx timeout [ 316.024886][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.037387][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'. [ 316.043535][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.225179][ T8167] x_tables: duplicate underflow at hook 1 [ 316.313206][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 316.381294][ T8098] team0: Port device team_slave_0 added [ 316.433262][ T8169] vlan2: entered promiscuous mode [ 316.458516][ T8169] vlan2: entered allmulticast mode [ 316.489603][ T8169] bond0: entered allmulticast mode [ 316.511216][ T8169] bond_slave_0: entered allmulticast mode [ 316.537427][ T8169] bond_slave_1: entered allmulticast mode [ 316.569200][ T8169] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 316.606644][ T8169] bond0: entered promiscuous mode [ 316.623172][ T8169] bond_slave_0: entered promiscuous mode [ 316.636982][ T8169] bond_slave_1: entered promiscuous mode [ 316.650826][ T8169] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 316.689206][ T8169] bond0: left allmulticast mode [ 316.719048][ T8169] bond_slave_0: left allmulticast mode [ 316.746443][ T8169] bond_slave_1: left allmulticast mode [ 316.774683][ T8169] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 316.815687][ T8169] bond0: left promiscuous mode [ 316.823417][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 316.833140][ T8169] bond_slave_0: left promiscuous mode [ 316.849172][ T8169] bond_slave_1: left promiscuous mode [ 316.868027][ T8169] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 317.120826][ T8098] team0: Port device team_slave_1 added [ 317.353141][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.434936][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.469871][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.476436][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.488396][ T8184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.803'. [ 317.615019][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.674675][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.698570][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.785690][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.241290][ T5233] Bluetooth: hci5: command tx timeout [ 318.882627][ T8098] hsr_slave_0: entered promiscuous mode [ 318.920314][ T8098] hsr_slave_1: entered promiscuous mode [ 318.961214][ T8098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.995808][ T8098] Cannot create hsr debugfs directory [ 319.014037][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 319.033232][ T29] audit: type=1326 audit(1722238875.442:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8196 comm="syz.1.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9773b77299 code=0x0 [ 319.481861][ T8217] netem: change failed [ 319.542469][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 320.196532][ T8228] vxfs: WRONG superblock magic 00000000 at 1 [ 320.210305][ T8228] vxfs: WRONG superblock magic 00000000 at 8 [ 320.216883][ T8228] vxfs: can't find superblock. [ 320.344872][ T5235] Bluetooth: hci5: command tx timeout [ 320.574356][ T8098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.071344][ T8098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.343671][ T8098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.521265][ T8098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.551692][ T8240] netlink: 'syz.1.823': attribute type 9 has an invalid length. [ 321.571824][ T8240] netlink: 'syz.1.823': attribute type 7 has an invalid length. [ 321.590448][ T8240] netlink: 'syz.1.823': attribute type 8 has an invalid length. [ 321.668937][ T1052] bridge_slave_1: left allmulticast mode [ 321.692133][ T1052] bridge_slave_1: left promiscuous mode [ 321.744033][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.841963][ T1052] bridge_slave_0: left allmulticast mode [ 321.868168][ T1052] bridge_slave_0: left promiscuous mode [ 321.910911][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.986826][ T29] audit: type=1326 audit(1722238880.392:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8270 comm="syz.1.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9773b77299 code=0x0 [ 324.287956][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.330156][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.345633][ T1052] bond0 (unregistering): Released all slaves [ 324.826068][ T8289] netlink: 'syz.1.840': attribute type 4 has an invalid length. [ 325.036987][ T1190] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 325.811327][ T1190] usb 4-1: Using ep0 maxpacket: 16 [ 325.865995][ T1190] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 325.988161][ T1190] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.059114][ T1190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 326.113786][ T1190] usb 4-1: SerialNumber: syz [ 326.188854][ T1190] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 326.241182][ T1190] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 326.271561][ T1190] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 326.313313][ T8098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.516928][ T1052] hsr_slave_0: left promiscuous mode [ 326.571165][ T5277] usb 4-1: USB disconnect, device number 11 [ 326.591907][ T1052] hsr_slave_1: left promiscuous mode [ 326.602750][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.623244][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.638417][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.656497][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.738732][ T1052] veth1_macvtap: left promiscuous mode [ 326.761103][ T1052] veth0_macvtap: left promiscuous mode [ 326.785779][ T1052] veth1_vlan: left promiscuous mode [ 326.798667][ T1052] veth0_vlan: left promiscuous mode [ 328.996005][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 329.099169][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 329.784017][ T5233] Bluetooth: hci0: command 0x0406 tx timeout [ 330.155107][ T8098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.187891][ T8098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 330.207093][ T8315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.218693][ T8315] batadv_slave_0: entered promiscuous mode [ 330.430778][ T8319] netlink: 'syz.4.851': attribute type 4 has an invalid length. [ 330.741391][ T8098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.163544][ T29] audit: type=1326 audit(1722238887.572:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8340 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816f177299 code=0x7ffc0000 [ 331.256370][ T29] audit: type=1326 audit(1722238887.572:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8340 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816f177299 code=0x7ffc0000 [ 331.376942][ T29] audit: type=1326 audit(1722238887.612:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8340 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f816f177299 code=0x7ffc0000 [ 331.430407][ T8098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.480376][ T29] audit: type=1326 audit(1722238887.612:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8340 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816f177299 code=0x7ffc0000 [ 331.507116][ T29] audit: type=1326 audit(1722238887.612:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8340 comm="syz.3.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816f177299 code=0x7ffc0000 [ 331.590060][ T8098] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.644449][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.651684][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.712982][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.720188][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.371921][ T29] audit: type=1326 audit(1722238888.772:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6c377299 code=0x7ffc0000 [ 332.470125][ T29] audit: type=1326 audit(1722238888.772:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6c377299 code=0x7ffc0000 [ 332.548025][ T29] audit: type=1326 audit(1722238888.812:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fba6c377299 code=0x7ffc0000 [ 332.580223][ T8098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.755123][ T29] audit: type=1326 audit(1722238888.812:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6c377299 code=0x7ffc0000 [ 333.453970][ T29] audit: type=1326 audit(1722238888.812:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6c377299 code=0x7ffc0000 [ 333.603488][ T8098] veth0_vlan: entered promiscuous mode [ 333.638360][ T8098] veth1_vlan: entered promiscuous mode [ 333.762137][ T8098] veth0_macvtap: entered promiscuous mode [ 333.783243][ T8098] veth1_macvtap: entered promiscuous mode [ 333.818887][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.829808][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.854639][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.877143][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.907698][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.938033][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.979816][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.000820][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.020830][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.045156][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.096879][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.160437][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.200853][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.226294][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.236903][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.247357][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.258809][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.271153][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.282209][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.293450][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.305043][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.488701][ T8098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.647869][ T8098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.835658][ T8098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.914133][ T8098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.970598][ T8098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.030774][ T8098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.039601][ T8098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.390430][ T35] tipc: Subscription rejected, illegal request [ 335.916805][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.289934][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.368314][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.405750][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.841046][ T5278] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 337.201220][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 337.636657][ T5278] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 337.695894][ T5278] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.725492][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.760868][ T5278] usb 2-1: SerialNumber: syz [ 337.791465][ T5278] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 337.808847][ T5278] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 337.840653][ T5278] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 338.040458][ T5277] usb 2-1: USB disconnect, device number 9 [ 339.502669][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.906'. [ 339.545667][ T8464] bridge0: port 3(macvlan2) entered blocking state [ 339.565381][ T8464] bridge0: port 3(macvlan2) entered disabled state [ 339.586900][ T8464] macvlan2: entered allmulticast mode [ 339.629644][ T8464] macvlan2: entered promiscuous mode [ 340.036261][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 340.205053][ T8465] macvlan2 (unregistering): left allmulticast mode [ 340.226751][ T8465] macvlan2 (unregistering): left promiscuous mode [ 340.257271][ T8465] bridge0: port 3(macvlan2) entered disabled state [ 340.375299][ T8465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.434217][ T8465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.473317][ T8465] bond0 (unregistering): Released all slaves [ 340.844929][ C1] eth0: bad gso: type: 1, size: 1408 [ 341.837755][ T8499] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 342.083897][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'. [ 343.090150][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 343.827338][ T8534] overlayfs: missing 'lowerdir' [ 344.869344][ T8540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'. [ 344.938151][ T8540] vlan2: entered promiscuous mode [ 347.144103][ T8561] batman_adv: batadv0: Adding interface: gretap1 [ 347.181739][ T8561] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.209854][ T8561] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 347.441069][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 347.455159][ C1] eth0: bad gso: type: 1, size: 1408 [ 347.579736][ T8572] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 347.765324][ T8572] netlink: 'syz.0.943': attribute type 2 has an invalid length. [ 348.339511][ T8581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.769282][ T8598] batman_adv: batadv0: Adding interface: gretap1 [ 348.786003][ T8598] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.822180][ T8598] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 348.971163][ C1] eth0: bad gso: type: 1, size: 1408 [ 349.024106][ T8608] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 349.058406][ T8608] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 349.078745][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 349.511114][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.963'. [ 349.932680][ T8621] bridge0: port 3(macvlan2) entered blocking state [ 349.958909][ T8621] bridge0: port 3(macvlan2) entered disabled state [ 350.000119][ T8621] macvlan2: entered allmulticast mode [ 350.048036][ T8621] macvlan2: entered promiscuous mode [ 350.085241][ T8625] macvlan2 (unregistering): left allmulticast mode [ 350.114259][ T8625] macvlan2 (unregistering): left promiscuous mode [ 350.144324][ T8625] bridge0: port 3(macvlan2) entered disabled state [ 351.473119][ C1] eth0: bad gso: type: 1, size: 1408 [ 351.701809][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'. [ 351.754687][ T8655] vlan2: entered promiscuous mode [ 355.232111][ C1] eth0: bad gso: type: 1, size: 1408 [ 357.100346][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'. [ 358.095896][ T8746] netlink: 'syz.2.1012': attribute type 11 has an invalid length. [ 359.122859][ T8769] overlayfs: missing 'lowerdir' [ 359.701954][ T30] INFO: task syz.4.370:6641 blocked for more than 143 seconds. [ 359.709751][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 360.023286][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.110707][ T30] task:syz.4.370 state:D stack:24672 pid:6641 tgid:6641 ppid:5219 flags:0x00004004 [ 360.181071][ T30] Call Trace: [ 360.184426][ T30] [ 360.187438][ T30] __schedule+0x17ae/0x4a10 [ 360.229014][ T30] ? __pfx___schedule+0x10/0x10 [ 360.249120][ T30] ? __pfx_lock_release+0x10/0x10 [ 360.261021][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.267103][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.290632][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 360.311100][ T30] ? schedule+0x90/0x320 [ 360.315432][ T30] schedule+0x14b/0x320 [ 360.319861][ T30] ? do_exit+0x4ff/0x27f0 [ 360.350631][ T30] do_exit+0x57c/0x27f0 [ 360.354937][ T30] ? __pfx_do_exit+0x10/0x10 [ 360.359566][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.422107][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.428190][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.491592][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 360.496799][ T30] do_group_exit+0x207/0x2c0 [ 360.540898][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.546185][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 360.596540][ T30] get_signal+0x1695/0x1730 [ 360.601552][ T30] ? __pfx_get_signal+0x10/0x10 [ 360.607288][ T30] arch_do_signal_or_restart+0x96/0x860 [ 360.640633][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 360.646888][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.690898][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 360.696719][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 360.721164][ T30] do_syscall_64+0x100/0x230 [ 360.725852][ T30] ? clear_bhb_loop+0x35/0x90 [ 360.741064][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.747147][ T30] RIP: 0033:0x7f4800377299 [ 360.770575][ T30] RSP: 002b:00007ffd9c6e4178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 360.779075][ T30] RAX: fffffffffffffdfc RBX: 00000000000314d0 RCX: 00007f4800377299 [ 360.800635][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f480050613c [ 360.823075][ T30] RBP: 00007f480050613c R08: 00007f4800505f80 R09: 00007ffd9c6e445f [ 360.839215][ T30] R10: 00007ffd9c6e4270 R11: 0000000000000246 R12: 0000000000000032 [ 360.850613][ T30] R13: 00007ffd9c6e4270 R14: 00007ffd9c6e4290 R15: 000000000003149e [ 360.858759][ T30] [ 360.874037][ T30] INFO: task syz.4.370:6642 blocked for more than 144 seconds. [ 360.921959][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 360.952868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.962068][ T30] task:syz.4.370 state:D stack:25552 pid:6642 tgid:6641 ppid:5219 flags:0x00004006 [ 361.000916][ T30] Call Trace: [ 361.004252][ T30] [ 361.007216][ T30] __schedule+0x17ae/0x4a10 [ 361.022272][ T30] ? __pfx___schedule+0x10/0x10 [ 361.027249][ T30] ? __pfx_lock_release+0x10/0x10 [ 361.040675][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.060692][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.067083][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 361.095036][ T30] ? schedule+0x90/0x320 [ 361.099409][ T30] schedule+0x14b/0x320 [ 361.108011][ T30] ? do_exit+0x4ff/0x27f0 [ 361.115799][ T30] do_exit+0x57c/0x27f0 [ 361.120043][ T30] ? __pfx_do_exit+0x10/0x10 [ 361.134217][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.139683][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.150769][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.167841][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 361.180887][ T30] do_group_exit+0x207/0x2c0 [ 361.185560][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.197994][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 361.203478][ T30] get_signal+0x1695/0x1730 [ 361.208043][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 361.219032][ T30] ? __pfx_get_signal+0x10/0x10 [ 361.229962][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 361.235056][ T30] arch_do_signal_or_restart+0x96/0x860 [ 361.243680][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.249895][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.256483][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 361.268289][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 361.274233][ T30] do_syscall_64+0x100/0x230 [ 361.278880][ T30] ? clear_bhb_loop+0x35/0x90 [ 361.283654][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.289589][ T30] RIP: 0033:0x7f4800377299 [ 361.294150][ T30] RSP: 002b:00007f4801195048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.302698][ T30] RAX: 000000000000000b RBX: 00007f4800505f80 RCX: 00007f4800377299 [ 361.310852][ T30] RDX: 000000000000275a RSI: 0000000020000300 RDI: ffffffffffffff9c [ 361.318856][ T30] RBP: 00007f48003e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 361.328437][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.336681][ T30] R13: 000000000000000b R14: 00007f4800505f80 R15: 00007ffd9c6e4018 [ 361.344805][ T30] [ 361.349251][ T30] INFO: task syz.4.370:6648 blocked for more than 144 seconds. [ 361.363854][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 361.373990][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.383178][ T30] task:syz.4.370 state:D stack:21264 pid:6648 tgid:6641 ppid:5219 flags:0x00004004 [ 361.393450][ T30] Call Trace: [ 361.396769][ T30] [ 361.399727][ T30] __schedule+0x17ae/0x4a10 [ 361.404395][ T30] ? __pfx___schedule+0x10/0x10 [ 361.409291][ T30] ? __pfx_lock_release+0x10/0x10 [ 361.414708][ T30] ? schedule+0x90/0x320 [ 361.419019][ T30] schedule+0x14b/0x320 [ 361.424064][ T30] schedule_timeout+0xb0/0x310 [ 361.428872][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 361.434357][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.440418][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.446022][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 361.451336][ T30] __wait_for_common+0x3ea/0x6d0 [ 361.456351][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 361.461840][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 361.467345][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 361.472854][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.478114][ T30] wait_for_completion_state+0x1c/0x40 [ 361.483862][ T30] do_coredump+0x984/0x2a30 [ 361.488507][ T30] ? __kasan_slab_free+0x37/0x60 [ 361.495943][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 361.502129][ T30] ? __pfx_do_coredump+0x10/0x10 [ 361.507204][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.512569][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 361.517843][ T30] get_signal+0x13ee/0x1730 [ 361.522512][ T30] ? __pfx_get_signal+0x10/0x10 [ 361.528004][ T30] arch_do_signal_or_restart+0x96/0x860 [ 361.534101][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.540424][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.546530][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 361.552519][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 361.558150][ T30] do_syscall_64+0x100/0x230 [ 361.563227][ T30] ? clear_bhb_loop+0x35/0x90 [ 361.567955][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.573974][ T30] RIP: 0033:0x7f4800375e1f [ 361.578416][ T30] RSP: 002b:00007f4801153010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 361.586953][ T30] RAX: ffffffffffffffda RBX: 00007f4800506130 RCX: 00007f4800375e1f [ 361.595218][ T30] RDX: 0000000000000036 RSI: 0000000020000100 RDI: 00000000000000c8 [ 361.605429][ T30] RBP: 00007f48003e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 361.613572][ T30] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000000 [ 361.623012][ T30] R13: 000000000000006e R14: 00007f4800506130 R15: 00007ffd9c6e4018 [ 361.631837][ T30] [ 361.634948][ T30] INFO: task syz.1.397:6812 blocked for more than 145 seconds. [ 361.644948][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 361.653862][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.662702][ T30] task:syz.1.397 state:D stack:24672 pid:6812 tgid:6812 ppid:5732 flags:0x00004004 [ 361.672996][ T30] Call Trace: [ 361.676327][ T30] [ 361.679285][ T30] __schedule+0x17ae/0x4a10 [ 361.684220][ T30] ? __pfx___schedule+0x10/0x10 [ 361.689145][ T30] ? __pfx_lock_release+0x10/0x10 [ 361.694344][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.700371][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.707592][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 361.716475][ T30] ? schedule+0x90/0x320 [ 361.722402][ T30] schedule+0x14b/0x320 [ 361.726616][ T30] ? do_exit+0x4ff/0x27f0 [ 361.732932][ T30] do_exit+0x57c/0x27f0 [ 361.737202][ T30] ? __pfx_do_exit+0x10/0x10 [ 361.742410][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.747845][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.753994][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.760350][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 361.796684][ T30] do_group_exit+0x207/0x2c0 [ 361.802611][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.807950][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 361.820325][ T30] get_signal+0x1695/0x1730 [ 361.834977][ T30] ? __pfx_get_signal+0x10/0x10 [ 361.839972][ T30] arch_do_signal_or_restart+0x96/0x860 [ 361.846691][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.852989][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.859017][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 361.865374][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 361.871048][ T30] do_syscall_64+0x100/0x230 [ 361.875690][ T30] ? clear_bhb_loop+0x35/0x90 [ 361.880429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.886500][ T30] RIP: 0033:0x7ff21eb77299 [ 361.891296][ T30] RSP: 002b:00007fffe62e9b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.899740][ T30] RAX: fffffffffffffdfc RBX: 000000000003466b RCX: 00007ff21eb77299 [ 361.907856][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff21ed0613c [ 361.915956][ T30] RBP: 00007ff21ed0613c R08: 00007ff21ed05f80 R09: 00007fffe62e9e6f [ 361.924326][ T30] R10: 00007fffe62e9c80 R11: 0000000000000246 R12: 0000000000000032 [ 361.935807][ T30] R13: 00007fffe62e9c80 R14: 00007fffe62e9ca0 R15: 0000000000034639 [ 361.943948][ T30] [ 361.947012][ T30] INFO: task syz.1.397:6813 blocked for more than 145 seconds. [ 361.960467][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 361.980158][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.989403][ T30] task:syz.1.397 state:D stack:24344 pid:6813 tgid:6812 ppid:5732 flags:0x00004006 [ 362.000130][ T30] Call Trace: [ 362.003836][ T30] [ 362.006811][ T30] __schedule+0x17ae/0x4a10 [ 362.011634][ T30] ? __pfx___schedule+0x10/0x10 [ 362.016501][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.021685][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.027709][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.034223][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 362.039968][ T30] ? schedule+0x90/0x320 [ 362.046381][ T30] schedule+0x14b/0x320 [ 362.050633][ T30] ? do_exit+0x4ff/0x27f0 [ 362.055032][ T30] do_exit+0x57c/0x27f0 [ 362.059234][ T30] ? __pfx_do_exit+0x10/0x10 [ 362.063962][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 362.069390][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.075738][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.082205][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 362.087401][ T30] do_group_exit+0x207/0x2c0 [ 362.092101][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.097382][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 362.103194][ T30] get_signal+0x1695/0x1730 [ 362.107754][ T30] ? __pfx_vfs_write+0x10/0x10 [ 362.112632][ T30] ? __pfx_get_signal+0x10/0x10 [ 362.117530][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.123685][ T30] arch_do_signal_or_restart+0x96/0x860 [ 362.129272][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 362.135840][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.142865][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 362.148640][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 362.154735][ T30] do_syscall_64+0x100/0x230 [ 362.159386][ T30] ? clear_bhb_loop+0x35/0x90 [ 362.165161][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.171434][ T30] RIP: 0033:0x7ff21eb77299 [ 362.175880][ T30] RSP: 002b:00007ff21f956048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.184604][ T30] RAX: 0000000000200000 RBX: 00007ff21ed05f80 RCX: 00007ff21eb77299 [ 362.193113][ T30] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 000000000000000b [ 362.201280][ T30] RBP: 00007ff21ebe48e6 R08: 0000000000000000 R09: 0000000000000000 [ 362.209313][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.217358][ T30] R13: 000000000000000b R14: 00007ff21ed05f80 R15: 00007fffe62e9a28 [ 362.225769][ T30] [ 362.228817][ T30] INFO: task syz.1.397:6814 blocked for more than 145 seconds. [ 362.238371][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 362.246988][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.256407][ T30] task:syz.1.397 state:D stack:26352 pid:6814 tgid:6812 ppid:5732 flags:0x00000004 [ 362.270586][ T30] Call Trace: [ 362.273936][ T30] [ 362.276903][ T30] __schedule+0x17ae/0x4a10 [ 362.282993][ T30] ? __pfx___schedule+0x10/0x10 [ 362.288052][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.293275][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 362.298868][ T30] ? schedule+0x90/0x320 [ 362.303247][ T30] schedule+0x14b/0x320 [ 362.307440][ T30] schedule_preempt_disabled+0x13/0x30 [ 362.313292][ T30] __mutex_lock+0x6a4/0xd70 [ 362.317841][ T30] ? __mutex_lock+0x527/0xd70 [ 362.322662][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 362.328594][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 362.333738][ T30] ? __asan_memset+0x23/0x50 [ 362.338397][ T30] ? netlink_unicast+0x7f0/0x990 [ 362.345329][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 362.350322][ T30] ? __sock_sendmsg+0x221/0x270 [ 362.355360][ T30] ? __sys_sendmsg+0x2b0/0x3a0 [ 362.360160][ T30] nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 362.366607][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 362.373040][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 362.379245][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 362.385615][ T30] ? __nla_parse+0x40/0x60 [ 362.390163][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 362.398021][ T30] genl_rcv_msg+0xb14/0xec0 [ 362.403034][ T30] ? mark_lock+0x9a/0x350 [ 362.407416][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.412729][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 362.417818][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 362.424132][ T30] ? __pfx___might_resched+0x10/0x10 [ 362.429460][ T30] netlink_rcv_skb+0x1e3/0x430 [ 362.434606][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.439683][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.445108][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 362.451533][ T30] genl_rcv+0x28/0x40 [ 362.455663][ T30] netlink_unicast+0x7f0/0x990 [ 362.460442][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 362.466089][ T30] ? __virt_addr_valid+0x183/0x530 [ 362.471348][ T30] ? __check_object_size+0x49c/0x900 [ 362.476669][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 362.482041][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 362.486909][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.494109][ T30] ? __import_iovec+0x536/0x820 [ 362.498984][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 362.504396][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 362.509904][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.515300][ T30] __sock_sendmsg+0x221/0x270 [ 362.520071][ T30] ____sys_sendmsg+0x525/0x7d0 [ 362.525236][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.530861][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 362.535529][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.540765][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.547137][ T30] ? do_syscall_64+0x100/0x230 [ 362.553004][ T30] ? do_syscall_64+0xb6/0x230 [ 362.557725][ T30] do_syscall_64+0xf3/0x230 [ 362.562349][ T30] ? clear_bhb_loop+0x35/0x90 [ 362.567163][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.573140][ T30] RIP: 0033:0x7ff21eb77299 [ 362.577559][ T30] RSP: 002b:00007ff21f935048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.586597][ T30] RAX: ffffffffffffffda RBX: 00007ff21ed06058 RCX: 00007ff21eb77299 [ 362.594669][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 362.604238][ T30] RBP: 00007ff21ebe48e6 R08: 0000000000000000 R09: 0000000000000000 [ 362.612608][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.620721][ T30] R13: 000000000000006e R14: 00007ff21ed06058 R15: 00007fffe62e9a28 [ 362.628846][ T30] [ 362.632030][ T30] INFO: task syz.1.397:6817 blocked for more than 146 seconds. [ 362.644824][ T30] Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 362.654137][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.662933][ T30] task:syz.1.397 state:D stack:22616 pid:6817 tgid:6812 ppid:5732 flags:0x00000004 [ 362.673241][ T30] Call Trace: [ 362.676556][ T30] [ 362.679509][ T30] __schedule+0x17ae/0x4a10 [ 362.684106][ T30] ? __pfx___schedule+0x10/0x10 [ 362.688991][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.694276][ T30] ? schedule+0x90/0x320 [ 362.698567][ T30] schedule+0x14b/0x320 [ 362.702810][ T30] schedule_timeout+0xb0/0x310 [ 362.707616][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 362.713163][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.719213][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.724543][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 362.729778][ T30] __wait_for_common+0x3ea/0x6d0 [ 362.737109][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 362.743768][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 362.749283][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 362.756729][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.762077][ T30] wait_for_completion_state+0x1c/0x40 [ 362.767584][ T30] do_coredump+0x984/0x2a30 [ 362.772252][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.777322][ T30] ? __kasan_slab_free+0x37/0x60 [ 362.782359][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 362.788135][ T30] ? __pfx_do_coredump+0x10/0x10 [ 362.793345][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.798585][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 362.803853][ T30] get_signal+0x13ee/0x1730 [ 362.808386][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 362.814446][ T30] ? __pfx_get_signal+0x10/0x10 [ 362.819340][ T30] arch_do_signal_or_restart+0x96/0x860 [ 362.825140][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 362.831441][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.837474][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 362.843752][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 362.849384][ T30] do_syscall_64+0x100/0x230 [ 362.854527][ T30] ? clear_bhb_loop+0x35/0x90 [ 362.860009][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.866363][ T30] RIP: 0033:0x7ff21eb77299 [ 362.870924][ T30] RSP: 002b:00007ff21f914048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 362.879385][ T30] RAX: ffffffffffffffda RBX: 00007ff21ed06130 RCX: 00007ff21eb77299 [ 362.887825][ T30] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 362.895888][ T30] RBP: 00007ff21ebe48e6 R08: 000000000000000b R09: 0000000000000000 [ 362.905050][ T30] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 362.915068][ T30] R13: 000000000000006e R14: 00007ff21ed06130 R15: 00007fffe62e9a28 [ 362.923211][ T30] [ 362.928446][ T30] [ 362.928446][ T30] Showing all locks held in the system: [ 362.936782][ T30] 3 locks held by kworker/u8:0/11: [ 362.943303][ T30] 1 lock held by khungtaskd/30: [ 362.956723][ T30] #0: ffffffff8e737660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 362.967708][ T30] 2 locks held by kworker/u8:2/35: [ 362.973416][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 362.983512][ T30] #1: ffff8880b9228948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 362.995043][ T30] 6 locks held by kworker/u8:4/61: [ 363.000157][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 363.011451][ T30] #1: ffffc900015dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 363.022198][ T30] #2: ffffffff8fa60cd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 363.031770][ T30] #3: ffffffff8fa6d848 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 363.043139][ T30] #4: ffff88807cf9d428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xba/0x1e0 [ 363.053835][ T30] #5: ffffffff8e73ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 363.065552][ T30] 2 locks held by getty/4978: [ 363.070298][ T30] #0: ffff88802b2300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 363.080455][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 363.090917][ T30] 3 locks held by kworker/0:5/5278: [ 363.096204][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 363.107556][ T30] #1: ffffc90003cd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 363.118909][ T30] #2: ffffffff8fa6d848 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 363.128030][ T30] 1 lock held by syz-executor/6578: [ 363.133625][ T30] #0: ffffffff8fa6d848 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 363.142891][ T30] 2 locks held by syz.4.370/6645: [ 363.147946][ T30] #0: ffffffff8fad2f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 363.158636][ T30] #1: ffffffff8ea04c68 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 363.170073][ T30] 2 locks held by syz.1.397/6814: [ 363.175234][ T30] #0: ffffffff8fad2f50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 363.183569][ T30] #1: ffffffff8ea04c68 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 363.194329][ T30] 3 locks held by syz-executor/7191: [ 363.199661][ T30] #0: ffff88805f7fcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 363.209773][ T30] #1: ffff88805f7fc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 363.219672][ T30] #2: ffffffff8fbd9028 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 363.230116][ T30] 3 locks held by syz.2.1024/8765: [ 363.235344][ T30] #0: ffff88802e6f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 363.245545][ T30] #1: ffff88802e6f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 363.255814][ T30] #2: ffffffff8e73ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 363.268374][ T30] [ 363.272268][ T30] ============================================= [ 363.272268][ T30] [ 363.289205][ T30] NMI backtrace for cpu 0 [ 363.293615][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 363.304160][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 363.314226][ T30] Call Trace: [ 363.317510][ T30] [ 363.320438][ T30] dump_stack_lvl+0x241/0x360 [ 363.325132][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.330337][ T30] ? __pfx__printk+0x10/0x10 [ 363.334928][ T30] ? vprintk_emit+0x631/0x770 [ 363.339607][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 363.344644][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 363.349600][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 363.355072][ T30] ? _printk+0xd5/0x120 [ 363.359234][ T30] ? __pfx__printk+0x10/0x10 [ 363.363831][ T30] ? __wake_up_klogd+0xcc/0x110 [ 363.368707][ T30] ? __pfx__printk+0x10/0x10 [ 363.373326][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 363.378366][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 363.384364][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 363.390381][ T30] watchdog+0xfee/0x1030 [ 363.394737][ T30] ? watchdog+0x1ea/0x1030 [ 363.399171][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.403859][ T30] kthread+0x2f0/0x390 [ 363.407929][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.412613][ T30] ? __pfx_kthread+0x10/0x10 [ 363.417201][ T30] ret_from_fork+0x4b/0x80 [ 363.421627][ T30] ? __pfx_kthread+0x10/0x10 [ 363.426222][ T30] ret_from_fork_asm+0x1a/0x30 [ 363.431031][ T30] [ 363.435697][ T30] Sending NMI from CPU 0 to CPUs 1: [ 363.441505][ C1] NMI backtrace for cpu 1 [ 363.441521][ C1] CPU: 1 UID: 0 PID: 4658 Comm: klogd Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 363.441541][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 363.441552][ C1] RIP: 0010:entry_SYSCALL_64_after_hwframe+0x58/0x7f [ 363.441585][ C1] Code: ed 45 31 e4 45 31 ed 45 31 f6 45 31 ff 48 89 e7 48 63 f0 66 90 b9 48 00 00 00 65 48 8b 15 e7 79 42 74 89 d0 48 c1 ea 20 0f 30 <90> 0f 1f 44 00 00 eb 0d cc cc cc cc cc cc cc cc cc cc cc cc cc e8 [ 363.441607][ C1] RSP: 0018:ffffc90003057f58 EFLAGS: 00000046 [ 363.441624][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000048 [ 363.441635][ C1] RDX: 0000000000000000 RSI: 000000000000002c RDI: ffffc90003057f58 [ 363.441647][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.441663][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.441674][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.441684][ C1] FS: 00007fc4d16a3380(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 363.441700][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.441712][ C1] CR2: 00007ffea3909e38 CR3: 000000007e9c0000 CR4: 00000000003526f0 [ 363.441728][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.441738][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.441750][ C1] Call Trace: [ 363.604956][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 363.611871][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00004-gdc1c8034e31b #0 [ 363.622415][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 363.632507][ T30] Call Trace: [ 363.635811][ T30] [ 363.638755][ T30] dump_stack_lvl+0x241/0x360 [ 363.643459][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.648683][ T30] ? __pfx__printk+0x10/0x10 [ 363.653287][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 363.659297][ T30] ? vscnprintf+0x5d/0x90 [ 363.663649][ T30] panic+0x349/0x860 [ 363.667563][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 363.673740][ T30] ? __pfx_panic+0x10/0x10 [ 363.678170][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 363.683567][ T30] ? __irq_work_queue_local+0x137/0x410 [ 363.689139][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 363.694523][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 363.700708][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 363.706900][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 363.713142][ T30] watchdog+0x102d/0x1030 [ 363.717496][ T30] ? watchdog+0x1ea/0x1030 [ 363.721934][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.726631][ T30] kthread+0x2f0/0x390 [ 363.730716][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.735423][ T30] ? __pfx_kthread+0x10/0x10 [ 363.740023][ T30] ret_from_fork+0x4b/0x80 [ 363.744464][ T30] ? __pfx_kthread+0x10/0x10 [ 363.749151][ T30] ret_from_fork_asm+0x1a/0x30 [ 363.753946][ T30] [ 363.757287][ T30] Kernel Offset: disabled [ 363.761623][ T30] Rebooting in 86400 seconds..