last executing test programs: 17.841983372s ago: executing program 2 (id=3023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'wlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 17.639025616s ago: executing program 2 (id=3024): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) (async, rerun: 32) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa8aaaaaaa00810000000800dc47267445000014000000020002900500000000000000001c83ca224e81d3ee8afbfea94ff5f470a09470fd5122be242754a6400acad5da29"], 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) (rerun: 32) syz_open_procfs(0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000002380)=0x18) (async, rerun: 64) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000080), 0x76e5467) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) 17.327617751s ago: executing program 2 (id=3025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xa89) sendto$inet(r1, &(0x7f0000000300)="a1", 0x1, 0x2c091, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 16.391505789s ago: executing program 2 (id=3027): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create(0x800809) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18) writev(r2, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000018c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000008c0)={0x50, 0x0, r4, {0x7, 0x28, 0x0, 0x1409d89, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x12dc01, 0x0) write$FUSE_WRITE(r5, &(0x7f00000000c0)={0x18}, 0x18) 15.615788326s ago: executing program 1 (id=3029): unshare(0x62040200) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 14.690803652s ago: executing program 1 (id=3032): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = gettid() sigaltstack(&(0x7f0000000040)={&(0x7f0000002000)=""/4125, 0x80000000, 0x101d}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)) 14.618187134s ago: executing program 1 (id=3033): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000540), 0x8) 14.171953039s ago: executing program 1 (id=3037): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2055) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x13) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) 13.25279474s ago: executing program 1 (id=3042): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') prctl$PR_SET_SECCOMP(0x10, 0x0, 0x0) 13.160635072s ago: executing program 2 (id=3043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000e00)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0), 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {}, {0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) r8 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\xa6Ey\xdb\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r9 = dup(r8) r10 = fanotify_init(0x0, 0x0) fanotify_mark(r10, 0x1, 0x40000033, r9, 0x0) pread64(r9, &(0x7f0000000400)=""/179, 0xb3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r11, 0x0, &(0x7f0000000100)=@tcp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r11, 0x0, &(0x7f0000000380)=""/179}, 0x20) 12.871340944s ago: executing program 2 (id=3044): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_bond\x00', 0x400}) close_range(r1, 0xffffffffffffffff, 0x0) 12.568026117s ago: executing program 1 (id=3047): r0 = syz_open_dev$evdev(&(0x7f0000005580), 0x4b1e, 0x800) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) 6.667630461s ago: executing program 0 (id=3092): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x4000000) 6.107118459s ago: executing program 0 (id=3097): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x0, 0x0, &(0x7f0000000080)=0x1b00) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newsa={0x1d8, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x80, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x60797cc}, {}, {}, 0x70bd26, 0x0, 0xa, 0x4}, [@algo_crypt={0xe6, 0x2, {{'ecb(cipher_null)\x00'}, 0x4f0, "01acb481cbe0ef56624595839b3d1714e46e50a3ab81768623e39647daa89206b54f170093d4a77d004a4a381de2aa8e125324a1ce0e0fa95884df51289d996652d3f36b008cdd93ad6227ac3c944d1edfee51be3113be61f0d956035d1649f8676858146e8b465716efc3f06ed719ab0ad89a756688ea1ad07c2224e1b0b26d55e1e437a6b355f1b720af0eec26a800011877e2fe77864eb4c414c1bc43"}}]}, 0x1d8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300fcaff6dd63c0c19400971984efd8e843aeeb858d390844e115d80291321176338a9cd71b16c90de9b5164ea5f75724885b69c0edaf8fab1aceb762ec3065959d641b0db4fc5f896c5f671f2c767b9f640385418129638bf57a59dc7157ba08534d556f6548b37856109fb6f532fc3e17082f8121fc6ad7621169e8406b9fef1b241e07c69301e9", @ANYBLOB="1c005a801800018014000300000000000000000000000005"], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001300eb990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e000000000000000000000000000000ff01000026ec000000000000000000000000000000a3c55f377a269b73c33a0c122bd13ab4d45a5fe855dc468af09b953c87f7f25afa119732e2ec7b17de9898aada234f61e2b298a0e8fbc1af430e44f124df2f1ae593ffbcf85dedcc0dbdfd06a53bc39fd8f4aa2415b2fe39ea25d7ac98bcc8b7a86a0d83cb493909ca75da0f745dfe66239d533ed30f7d6ee4babe34747e23ba41f481e37f3da0cf878694c00981f46713bebf"], 0xb8}}, 0x0) 5.75838989s ago: executing program 0 (id=3102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x40) 5.694537378s ago: executing program 0 (id=3103): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"/3778], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 3.845963287s ago: executing program 3 (id=3118): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r0, 0x1, 0x31, 0x0, &(0x7f00000008c0)) 3.595252383s ago: executing program 3 (id=3120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.341351228s ago: executing program 0 (id=3122): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x282340, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x3f, 0x0, 0x0, 0x20000000, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r5, 0x2}, 0x20) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') 2.272332479s ago: executing program 3 (id=3128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) 1.934341476s ago: executing program 3 (id=3130): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.912630078s ago: executing program 4 (id=3131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0xff, 0x0, 0x0, 0x0, 0x0) 1.649018242s ago: executing program 4 (id=3132): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x2) 1.648780439s ago: executing program 3 (id=3133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003b0007010000000000000000047c0000040000000c00018006000600800a00000c00028005000600"], 0x30}}, 0xc000) 1.450980441s ago: executing program 4 (id=3134): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000600)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 1.354272249s ago: executing program 3 (id=3135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, r1, 0x603, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5e}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x0) 1.089562803s ago: executing program 4 (id=3136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000000a0a010800000000000000000200000009000100"], 0x2c}}, 0x0) 941.986061ms ago: executing program 4 (id=3137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 151.95119ms ago: executing program 0 (id=3138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 0s ago: executing program 4 (id=3139): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x7c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_CHAIN={0x8, 0xb, 0x60}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004014}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 00000246 ORIG_RAX: 0000000000000000 [ 943.634225][T18203] RAX: ffffffffffffffda RBX: 00007efe19335f80 RCX: 00007efe1917c93c [ 943.642212][T18203] RDX: 000000000000000f RSI: 00007efe19eb40a0 RDI: 0000000000000004 [ 943.650194][T18203] RBP: 00007efe19eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 943.658179][T18203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.666165][T18203] R13: 0000000000000000 R14: 00007efe19335f80 R15: 00007efe1945fa28 [ 943.674172][T18203] [ 943.677304][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.693352][T13752] team0 (unregistering): Port device team_slave_0 removed [ 943.776816][T13552] usbtest 2-1:0.16: couldn't get endpoints, -22 [ 943.783859][T13552] usbtest 2-1:0.16: probe with driver usbtest failed with error -22 [ 943.811850][T13552] usb 2-1: USB disconnect, device number 54 [ 944.384993][T18106] hsr_slave_0: entered promiscuous mode [ 944.397387][T15721] Bluetooth: hci4: command tx timeout [ 944.404813][T18106] hsr_slave_1: entered promiscuous mode [ 944.412746][T18106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.421565][T18106] Cannot create hsr debugfs directory [ 944.526669][T18209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'. [ 944.616662][T18208] netlink: 195772 bytes leftover after parsing attributes in process `syz.3.2866'. [ 944.684041][T18213] FAULT_INJECTION: forcing a failure. [ 944.684041][T18213] name failslab, interval 1, probability 0, space 0, times 0 [ 944.717355][T18213] CPU: 0 UID: 0 PID: 18213 Comm: syz.1.2867 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 944.727855][T18213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 944.738025][T18213] Call Trace: [ 944.741317][T18213] [ 944.744257][T18213] dump_stack_lvl+0x241/0x360 [ 944.748981][T18213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.754196][T18213] ? __pfx__printk+0x10/0x10 [ 944.758804][T18213] ? __kmalloc_node_noprof+0xb7/0x440 [ 944.764195][T18213] ? __pfx___might_resched+0x10/0x10 [ 944.769500][T18213] should_fail_ex+0x3b0/0x4e0 [ 944.774201][T18213] should_failslab+0xac/0x100 [ 944.778912][T18213] __kmalloc_node_noprof+0xdf/0x440 [ 944.784256][T18213] ? __kvmalloc_node_noprof+0x72/0x190 [ 944.789836][T18213] ? hash_ipmac_create+0x2fa/0x1040 [ 944.795058][T18213] __kvmalloc_node_noprof+0x72/0x190 [ 944.800380][T18213] hash_ipmac_create+0x356/0x1040 [ 944.805466][T18213] ? __pfx_hash_ipmac_create+0x10/0x10 [ 944.810954][T18213] ip_set_create+0xa5c/0x1900 [ 944.815762][T18213] ? ip_set_create+0x45e/0x1900 [ 944.820667][T18213] ? trace_raw_output_contention_end+0xa/0xd0 [ 944.826773][T18213] ? __pfx_ip_set_create+0x10/0x10 [ 944.831915][T18213] ? trace_contention_end+0x3c/0x120 [ 944.837248][T18213] ? nfnetlink_rcv_msg+0x225/0x1180 [ 944.842558][T18213] nfnetlink_rcv_msg+0xbec/0x1180 [ 944.847603][T18213] ? nfnetlink_rcv_msg+0x225/0x1180 [ 944.852835][T18213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 944.858332][T18213] ? __netlink_deliver_tap+0x54d/0x7c0 [ 944.863807][T18213] ? netlink_deliver_tap+0x19d/0x1b0 [ 944.869111][T18213] ? netlink_unicast+0x7c4/0x990 [ 944.874057][T18213] ? netlink_sendmsg+0x8e4/0xcb0 [ 944.879011][T18213] ? __sock_sendmsg+0x221/0x270 [ 944.883876][T18213] ? ____sys_sendmsg+0x52a/0x7e0 [ 944.888831][T18213] ? __sys_sendmsg+0x2aa/0x390 [ 944.893729][T18213] ? do_syscall_64+0xf3/0x230 [ 944.898446][T18213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.904557][T18213] netlink_rcv_skb+0x1e3/0x430 [ 944.909363][T18213] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 944.914905][T18213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 944.920226][T18213] ? apparmor_capable+0x13b/0x1b0 [ 944.925286][T18213] ? bpf_lsm_capable+0x9/0x10 [ 944.929984][T18213] ? security_capable+0x7e/0x2d0 [ 944.934963][T18213] nfnetlink_rcv+0x297/0x2ab0 [ 944.939670][T18213] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 944.945433][T18213] ? __dev_queue_xmit+0x2da/0x3e80 [ 944.950579][T18213] ? __dev_queue_xmit+0x1764/0x3e80 [ 944.955791][T18213] ? kasan_save_track+0x51/0x80 [ 944.960657][T18213] ? do_syscall_64+0xf3/0x230 [ 944.965438][T18213] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 944.970653][T18213] ? __dev_queue_xmit+0x2da/0x3e80 [ 944.975787][T18213] ? __pfx___dev_queue_xmit+0x10/0x10 [ 944.981193][T18213] ? ref_tracker_free+0x643/0x7e0 [ 944.986229][T18213] ? __asan_memcpy+0x40/0x70 [ 944.990842][T18213] ? __pfx_ref_tracker_free+0x10/0x10 [ 944.996235][T18213] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.001535][T18213] ? skb_clone+0x240/0x390 [ 945.005969][T18213] ? __pfx_lock_release+0x10/0x10 [ 945.011016][T18213] ? __netlink_deliver_tap+0x77e/0x7c0 [ 945.016504][T18213] ? netlink_deliver_tap+0x2e/0x1b0 [ 945.021721][T18213] netlink_unicast+0x7f6/0x990 [ 945.026503][T18213] ? __pfx_netlink_unicast+0x10/0x10 [ 945.031802][T18213] ? __virt_addr_valid+0x183/0x530 [ 945.036929][T18213] ? __check_object_size+0x48e/0x900 [ 945.042246][T18213] netlink_sendmsg+0x8e4/0xcb0 [ 945.047036][T18213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.052347][T18213] ? aa_sock_msg_perm+0x91/0x160 [ 945.057398][T18213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 945.062699][T18213] __sock_sendmsg+0x221/0x270 [ 945.067393][T18213] ____sys_sendmsg+0x52a/0x7e0 [ 945.072190][T18213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 945.077507][T18213] __sys_sendmsg+0x2aa/0x390 [ 945.082115][T18213] ? __pfx___sys_sendmsg+0x10/0x10 [ 945.087245][T18213] ? vfs_write+0x7bf/0xc90 [ 945.091708][T18213] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 945.098053][T18213] ? do_syscall_64+0x100/0x230 [ 945.102842][T18213] ? do_syscall_64+0xb6/0x230 [ 945.107541][T18213] do_syscall_64+0xf3/0x230 [ 945.112070][T18213] ? clear_bhb_loop+0x35/0x90 [ 945.116764][T18213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.122673][T18213] RIP: 0033:0x7fed60f7def9 [ 945.127113][T18213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.146738][T18213] RSP: 002b:00007fed61d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.155169][T18213] RAX: ffffffffffffffda RBX: 00007fed61135f80 RCX: 00007fed60f7def9 [ 945.163154][T18213] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 945.171136][T18213] RBP: 00007fed61d11090 R08: 0000000000000000 R09: 0000000000000000 [ 945.179119][T18213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.187113][T18213] R13: 0000000000000000 R14: 00007fed61135f80 R15: 00007fed6125fa28 [ 945.195221][T18213] [ 945.198268][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.234368][T15721] Bluetooth: hci1: command tx timeout [ 945.467390][ T8] r8152-cfgselector 5-1: USB disconnect, device number 63 [ 945.832240][T18191] chnl_net:caif_netlink_parms(): no params data found [ 945.940471][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.104360][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.236401][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.362988][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.394325][T18191] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.413533][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.432907][T18191] bridge_slave_0: entered allmulticast mode [ 946.444394][T18191] bridge_slave_0: entered promiscuous mode [ 946.477474][T15721] Bluetooth: hci4: command tx timeout [ 946.530591][T18191] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.547675][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.590650][T18191] bridge_slave_1: entered allmulticast mode [ 946.616915][T18191] bridge_slave_1: entered promiscuous mode [ 946.723759][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.771754][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.814247][T18106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 946.837264][ T5272] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 946.876107][T18106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 946.929654][T18191] team0: Port device team_slave_0 added [ 946.962112][T18191] team0: Port device team_slave_1 added [ 946.982173][T18106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 946.998414][T18106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 947.021566][ T5272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.042479][ T5272] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 947.056334][ T5272] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 947.076644][ T5272] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 947.097990][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.111598][T18248] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 947.122343][T18191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.132137][ T5272] hub 4-1:1.0: bad descriptor, ignoring hub [ 947.138231][ T5272] hub 4-1:1.0: probe with driver hub failed with error -5 [ 947.140311][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.145951][ T5272] cdc_wdm 4-1:1.0: skipping garbage [ 947.186274][T18191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.194010][ T5272] cdc_wdm 4-1:1.0: skipping garbage [ 947.219995][ T5272] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 947.233205][ T5272] cdc_wdm 4-1:1.0: Unknown control protocol [ 947.283137][T18191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.291266][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.317877][T18191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.347333][ T63] bridge_slave_1: left allmulticast mode [ 947.354075][ T63] bridge_slave_1: left promiscuous mode [ 947.362342][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.376928][ T63] bridge_slave_0: left allmulticast mode [ 947.383758][ T63] bridge_slave_0: left promiscuous mode [ 947.392306][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.479087][ T5277] usb 4-1: USB disconnect, device number 53 [ 947.519295][T18270] FAULT_INJECTION: forcing a failure. [ 947.519295][T18270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.534731][T18270] CPU: 1 UID: 0 PID: 18270 Comm: syz.4.2882 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 947.545216][T18270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 947.555302][T18270] Call Trace: [ 947.558601][T18270] [ 947.561561][T18270] dump_stack_lvl+0x241/0x360 [ 947.566287][T18270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.571520][T18270] ? __pfx__printk+0x10/0x10 [ 947.576244][T18270] ? __pfx_lock_release+0x10/0x10 [ 947.581378][T18270] should_fail_ex+0x3b0/0x4e0 [ 947.586081][T18270] _copy_from_iter+0x1ed/0x1d60 [ 947.590949][T18270] ? __virt_addr_valid+0x183/0x530 [ 947.596108][T18270] ? __pfx_lock_release+0x10/0x10 [ 947.601253][T18270] ? __alloc_skb+0x28f/0x440 [ 947.605861][T18270] ? __pfx__copy_from_iter+0x10/0x10 [ 947.611184][T18270] ? __virt_addr_valid+0x183/0x530 [ 947.616309][T18270] ? __virt_addr_valid+0x183/0x530 [ 947.621429][T18270] ? __virt_addr_valid+0x45f/0x530 [ 947.626552][T18270] ? __check_object_size+0x48e/0x900 [ 947.631953][T18270] netlink_sendmsg+0x73d/0xcb0 [ 947.636739][T18270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.642042][T18270] ? aa_sock_msg_perm+0x91/0x160 [ 947.646996][T18270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.652293][T18270] __sock_sendmsg+0x221/0x270 [ 947.656984][T18270] ____sys_sendmsg+0x52a/0x7e0 [ 947.661769][T18270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.667082][T18270] __sys_sendmsg+0x2aa/0x390 [ 947.671695][T18270] ? __pfx___sys_sendmsg+0x10/0x10 [ 947.676821][T18270] ? vfs_write+0x7bf/0xc90 [ 947.681282][T18270] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 947.687627][T18270] ? do_syscall_64+0x100/0x230 [ 947.692413][T18270] ? do_syscall_64+0xb6/0x230 [ 947.697133][T18270] do_syscall_64+0xf3/0x230 [ 947.701665][T18270] ? clear_bhb_loop+0x35/0x90 [ 947.706371][T18270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.712287][T18270] RIP: 0033:0x7f9f3797def9 [ 947.716712][T18270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.736333][T18270] RSP: 002b:00007f9f3870b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.744763][T18270] RAX: ffffffffffffffda RBX: 00007f9f37b35f80 RCX: 00007f9f3797def9 [ 947.752746][T18270] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 947.760904][T18270] RBP: 00007f9f3870b090 R08: 0000000000000000 R09: 0000000000000000 [ 947.768885][T18270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.776864][T18270] R13: 0000000000000000 R14: 00007f9f37b35f80 R15: 00007f9f37c5fa28 [ 947.784861][T18270] [ 948.072516][T18278] blktrace: Concurrent blktraces are not allowed on nbd1 [ 948.153233][ T5269] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 948.335517][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 948.348568][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 948.359947][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 948.371207][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.384417][ T5269] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.393633][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.422877][ T5269] usb 5-1: config 0 descriptor?? [ 948.471681][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.477885][T18272] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 948.535505][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.548773][ T63] bond0 (unregistering): Released all slaves [ 948.559766][T15721] Bluetooth: hci4: command tx timeout [ 948.920439][T18191] hsr_slave_0: entered promiscuous mode [ 948.930921][T18272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.965370][T18191] hsr_slave_1: entered promiscuous mode [ 948.973087][T18272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.981699][T18191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.000904][T18191] Cannot create hsr debugfs directory [ 949.059652][ T5269] plantronics 0003:047F:FFFF.0046: unknown main item tag 0xd [ 949.077957][ T5269] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 949.116380][ T5269] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 949.341019][T13552] usb 5-1: USB disconnect, device number 64 [ 949.349581][ T63] hsr_slave_0: left promiscuous mode [ 949.371152][ T63] hsr_slave_1: left promiscuous mode [ 949.391984][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.413726][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.429935][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.445914][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.485289][ T63] veth1_macvtap: left promiscuous mode [ 949.493781][ T63] veth0_macvtap: left promiscuous mode [ 949.504338][ T63] veth1_vlan: left promiscuous mode [ 949.512167][ T63] veth0_vlan: left promiscuous mode [ 950.427696][ T63] team0 (unregistering): Port device team_slave_1 removed [ 950.483166][ T63] team0 (unregistering): Port device team_slave_0 removed [ 950.638931][T15721] Bluetooth: hci4: command tx timeout [ 951.060374][T16915] team0: Port device syz_tun removed [ 951.347501][T18106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.417195][T18106] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.458312][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.465429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.491511][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.498723][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.813229][T18106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.993253][T18106] veth0_vlan: entered promiscuous mode [ 952.036044][T18106] veth1_vlan: entered promiscuous mode [ 952.169357][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.188783][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.199647][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.208837][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.219198][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 952.226714][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 952.352603][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.402286][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.416662][T18106] veth0_macvtap: entered promiscuous mode [ 952.419482][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.432960][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.445606][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.454392][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 952.463335][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.468131][ T5269] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 952.551575][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.589108][T18106] veth1_macvtap: entered promiscuous mode [ 952.658821][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 952.687555][ T5269] usb 5-1: config 0 has an invalid interface number: 124 but max is 0 [ 952.695793][ T5269] usb 5-1: config 0 has no interface number 0 [ 952.722368][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.738256][ T5269] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 952.761314][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.773658][ T5269] usb 5-1: Product: syz [ 952.785919][ T5269] usb 5-1: Manufacturer: syz [ 952.812927][ T5269] usb 5-1: SerialNumber: syz [ 952.838934][ T5269] usb 5-1: config 0 descriptor?? [ 952.910247][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.940213][T18106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.953958][T18106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.970193][T18106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.983955][T18106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.001950][T18106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.023953][T18106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.059758][T18106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.181808][T18191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 953.265367][T18106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.291419][T18106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.305703][T18106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.326693][T18106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.336733][T18106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.351887][T18106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.375956][T18106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.404376][T18191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 953.424784][T18191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 953.482739][T18191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 953.503171][T18106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.513862][T18106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.534409][T18106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.545854][T18106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.793105][ T63] bridge_slave_1: left allmulticast mode [ 953.805877][ T63] bridge_slave_1: left promiscuous mode [ 953.815314][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.846468][ T63] bridge_slave_0: left allmulticast mode [ 953.852612][ T63] bridge_slave_0: left promiscuous mode [ 953.860979][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.319940][T15721] Bluetooth: hci0: command tx timeout [ 954.400111][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.425797][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.441986][ T63] bond0 (unregistering): Released all slaves [ 954.471064][T18356] chnl_net:caif_netlink_parms(): no params data found [ 954.557589][T15721] Bluetooth: hci2: command tx timeout [ 954.943628][T18358] chnl_net:caif_netlink_parms(): no params data found [ 954.978982][ T5269] usb 5-1: USB disconnect, device number 65 [ 955.019957][T13749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.072282][T13749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.147807][T18356] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.154948][T18356] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.172484][T18356] bridge_slave_0: entered allmulticast mode [ 955.184683][T18356] bridge_slave_0: entered promiscuous mode [ 955.204277][T18356] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.219435][T18356] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.226689][T18356] bridge_slave_1: entered allmulticast mode [ 955.234188][T18356] bridge_slave_1: entered promiscuous mode [ 955.384130][T18356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.449794][ T63] hsr_slave_0: left promiscuous mode [ 955.456645][ T63] hsr_slave_1: left promiscuous mode [ 955.469392][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.476819][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.488078][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.495544][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.522123][ T63] veth1_macvtap: left promiscuous mode [ 955.527978][ T63] veth0_macvtap: left promiscuous mode [ 955.533604][ T63] veth1_vlan: left promiscuous mode [ 955.539790][ T63] veth0_vlan: left promiscuous mode [ 955.580230][T18405] usb usb8: check_ctrlrecip: process 18405 (syz.4.2900) requesting ep 01 but needs 81 [ 955.603723][T18405] usb usb8: usbfs: process 18405 (syz.4.2900) did not claim interface 0 before use [ 955.620106][T18405] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 956.111847][ T63] team0 (unregistering): Port device team_slave_1 removed [ 956.168675][ T63] team0 (unregistering): Port device team_slave_0 removed [ 956.397422][T15721] Bluetooth: hci0: command tx timeout [ 956.640558][T15721] Bluetooth: hci2: command tx timeout [ 956.874468][T18356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.931784][T13749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.942669][T13749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.952776][T18358] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.962332][T18358] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.974721][T18358] bridge_slave_0: entered allmulticast mode [ 956.982097][T18358] bridge_slave_0: entered promiscuous mode [ 956.984774][ T5269] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 956.999607][T18358] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.014707][T18358] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.022581][T18358] bridge_slave_1: entered allmulticast mode [ 957.034751][T18358] bridge_slave_1: entered promiscuous mode [ 957.063599][T18356] team0: Port device team_slave_0 added [ 957.076493][T18356] team0: Port device team_slave_1 added [ 957.111605][T18358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.144281][T18191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.167669][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 957.199879][ T5269] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 957.218848][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.228461][ T5269] usb 5-1: Product: syz [ 957.232763][ T5269] usb 5-1: Manufacturer: syz [ 957.241883][T18358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.257191][ T5269] usb 5-1: SerialNumber: syz [ 957.300946][T18356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.316544][T18356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.388032][T18356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.423751][T18356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.431236][T18356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.462968][T18356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.485682][ T5269] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 957.536600][T18358] team0: Port device team_slave_0 added [ 957.576236][T18358] team0: Port device team_slave_1 added [ 957.621577][T18191] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.647363][ T5275] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 957.706678][ T51] usb 5-1: USB disconnect, device number 66 [ 957.715402][T18358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.728684][T18358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.737667][ T51] usblp0: removed [ 957.761668][T18358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.818752][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.834747][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.835051][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.841923][T13759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.860457][ T5275] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 957.870940][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.884771][T18358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.892953][T18358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.920543][ T5275] usb 1-1: config 0 descriptor?? [ 957.946888][T18358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.986625][T18356] hsr_slave_0: entered promiscuous mode [ 957.994782][T18356] hsr_slave_1: entered promiscuous mode [ 958.011694][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.018857][T13749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.111296][T18358] hsr_slave_0: entered promiscuous mode [ 958.120367][T18358] hsr_slave_1: entered promiscuous mode [ 958.126845][T18358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.135565][T18358] Cannot create hsr debugfs directory [ 958.320457][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 958.320476][ T29] audit: type=1326 audit(1727102661.426:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.334747][ T5275] hid (null): bogus close delimiter [ 958.356504][T18430] FAULT_INJECTION: forcing a failure. [ 958.356504][T18430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.370330][T18430] CPU: 1 UID: 0 PID: 18430 Comm: syz.4.2905 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 958.380793][T18430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 958.387234][ T29] audit: type=1326 audit(1727102661.456:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.391052][T18430] Call Trace: [ 958.391066][T18430] [ 958.391078][T18430] dump_stack_lvl+0x241/0x360 [ 958.391121][T18430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.414710][ T29] audit: type=1326 audit(1727102661.456:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.416768][T18430] ? __pfx__printk+0x10/0x10 [ 958.416807][T18430] ? __pfx_lock_release+0x10/0x10 [ 958.416848][T18430] should_fail_ex+0x3b0/0x4e0 [ 958.416889][T18430] _copy_from_user+0x2f/0xe0 [ 958.416924][T18430] copy_msghdr_from_user+0xae/0x680 [ 958.416951][T18430] ? kasan_quarantine_put+0xdc/0x230 [ 958.416988][T18430] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 958.417028][T18430] __sys_sendmsg+0x237/0x390 [ 958.417063][T18430] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.417095][T18430] ? vfs_write+0x7bf/0xc90 [ 958.417174][T18430] ? __secure_computing+0x125/0x370 [ 958.422074][ T29] audit: type=1326 audit(1727102661.456:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.424762][T18430] do_syscall_64+0xf3/0x230 [ 958.424801][T18430] ? clear_bhb_loop+0x35/0x90 [ 958.430853][ T29] audit: type=1326 audit(1727102661.456:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.452451][T18430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.452491][T18430] RIP: 0033:0x7f9f3797def9 [ 958.452513][T18430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.452534][T18430] RSP: 002b:00007f9f3870b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.452561][T18430] RAX: ffffffffffffffda RBX: 00007f9f37b35f80 RCX: 00007f9f3797def9 [ 958.452579][T18430] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000008 [ 958.452595][T18430] RBP: 00007f9f3870b090 R08: 0000000000000000 R09: 0000000000000000 [ 958.452612][T18430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.452628][T18430] R13: 0000000000000000 R14: 00007f9f37b35f80 R15: 00007f9f37c5fa28 [ 958.452660][T18430] [ 958.477778][T15721] Bluetooth: hci0: command tx timeout [ 958.651249][ T29] audit: type=1326 audit(1727102661.456:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.660523][T18356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.682976][ T29] audit: type=1326 audit(1727102661.456:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.686405][ T5275] usb 1-1: language id specifier not provided by device, defaulting to English [ 958.724476][T15721] Bluetooth: hci2: command tx timeout [ 958.745274][ T29] audit: type=1326 audit(1727102661.456:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.777226][ T29] audit: type=1326 audit(1727102661.456:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.801802][ T29] audit: type=1326 audit(1727102661.456:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.4.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3797def9 code=0x7ffc0000 [ 958.870673][T18356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.988978][T18356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.084211][ T51] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 959.109718][T18356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.153106][T18191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.181363][ T5275] uclogic 0003:256C:006D.0047: failed retrieving string descriptor #100: -71 [ 959.191006][ T5275] uclogic 0003:256C:006D.0047: failed retrieving pen parameters: -71 [ 959.219388][ T5275] uclogic 0003:256C:006D.0047: failed probing pen v1 parameters: -71 [ 959.232675][ T5275] uclogic 0003:256C:006D.0047: failed probing parameters: -71 [ 959.242132][ T5275] uclogic 0003:256C:006D.0047: probe with driver uclogic failed with error -71 [ 959.247737][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 959.259625][T18191] veth0_vlan: entered promiscuous mode [ 959.265736][ T5275] usb 1-1: USB disconnect, device number 36 [ 959.283030][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.310721][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.329377][T18191] veth1_vlan: entered promiscuous mode [ 959.367977][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 959.397615][ T51] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 959.406812][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.449918][ T51] usb 5-1: config 0 descriptor?? [ 959.466861][T18191] veth0_macvtap: entered promiscuous mode [ 959.485640][T18356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 959.544266][T18191] veth1_macvtap: entered promiscuous mode [ 959.551544][T18356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 959.574040][T18356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 959.616103][T18356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 959.634613][T18191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.647650][T18191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.658836][T18191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.670431][T18191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.681780][T18191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.692591][T18191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.704293][T18191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.715536][T18191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.726814][T18191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.742557][T18191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.755636][T18191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.766273][T18191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.777826][T18191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.793592][T18191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.894724][ T51] input: HID 0955:7214 Haptics as /devices/virtual/input/input73 [ 959.969496][ T51] shield 0003:0955:7214.0048: Registered Thunderstrike controller [ 959.987044][T18191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.996564][T18191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.006533][ T51] shield 0003:0955:7214.0048: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 960.014042][T18452] blktrace: Concurrent blktraces are not allowed on nbd0 [ 960.019141][T18191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.034159][T18191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.070188][T18433] random: crng reseeded on system resumption [ 960.404197][T18356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.425223][T18356] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.479803][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.487001][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.545839][T18459] fuse: Bad value for 'fd' [ 960.557796][T15721] Bluetooth: hci0: command tx timeout [ 960.574483][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.581644][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.606734][T18358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 960.636461][T18358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 960.678578][T18358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 960.797791][ T54] Bluetooth: hci2: command tx timeout [ 960.812159][T18356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 960.823147][T18356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 960.843055][T18358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 960.893051][ T937] usb 5-1: USB disconnect, device number 67 [ 960.899328][ T5271] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 960.955504][ T5271] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 960.991363][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.001577][ T5271] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 961.031663][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.060205][T18459] fuse: Unknown parameter 'grou id' [ 961.081101][T18356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.093860][ T5271] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 961.194612][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.203754][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.351168][T18356] veth0_vlan: entered promiscuous mode [ 961.384147][T18358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.398014][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 961.413185][T18356] veth1_vlan: entered promiscuous mode [ 961.418032][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 961.469111][T18358] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.510243][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.517489][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.557809][ T5271] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 961.563093][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.572822][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.666261][T18356] veth0_macvtap: entered promiscuous mode [ 961.717826][T18356] veth1_macvtap: entered promiscuous mode [ 961.729314][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 961.739441][ T5271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 724, setting to 64 [ 961.775400][ T5271] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.794785][ T5271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.800859][T18358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 961.829565][ T5271] usb 1-1: Product: syz [ 961.848403][T18482] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2913'. [ 961.861239][ T5271] usb 1-1: Manufacturer: syz [ 961.867014][T18482] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 961.873803][ T5271] usb 1-1: SerialNumber: syz [ 961.906652][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.933587][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.967313][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.967370][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.967393][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.967411][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.967431][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.967447][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.969289][T18356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.022209][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.022237][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.022252][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.022267][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.022281][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.022296][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.022310][T18356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.022325][T18356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.023467][T18356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.033739][T18358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.075743][T18356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.075789][T18356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.075822][T18356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.075854][T18356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.299511][T18358] veth0_vlan: entered promiscuous mode [ 962.353942][T18358] veth1_vlan: entered promiscuous mode [ 962.490948][T13749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.490976][T13749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.564651][T18358] veth0_macvtap: entered promiscuous mode [ 962.584384][T18358] veth1_macvtap: entered promiscuous mode [ 962.592065][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.592085][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.617288][ T5277] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 962.626426][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.626454][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.626471][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.626489][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.626504][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.626522][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.626537][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.626555][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.626571][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.626587][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.635866][ T5271] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 962.642552][T18358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.798451][ T5271] cdc_ncm 1-1:1.0: bind() failure [ 962.817504][ T5271] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 962.817543][ T5271] cdc_ncm 1-1:1.1: bind() failure [ 962.869250][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.869279][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.869295][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.869313][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.869328][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.869346][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.869361][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.869378][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.869394][T18358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.869410][T18358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.870745][T18358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.878793][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 962.889783][T18358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.907383][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 962.916324][T18358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.999341][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 963.019651][T18358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.057300][T18358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.199678][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.291994][T18505] blktrace: Concurrent blktraces are not allowed on nbd1 [ 963.324547][ T5277] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 963.352268][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.373586][ T5277] usb 3-1: config 0 descriptor?? [ 963.398376][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.417110][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.508350][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.523014][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.010519][ T5277] usb 3-1: string descriptor 0 read error: -71 [ 964.019304][ T5277] uclogic 0003:256C:006E.0049: failed retrieving string descriptor #200: -71 [ 964.044401][ T5277] uclogic 0003:256C:006E.0049: failed retrieving pen parameters: -71 [ 964.112472][ T5277] uclogic 0003:256C:006E.0049: failed probing pen v2 parameters: -71 [ 964.152985][ T5277] uclogic 0003:256C:006E.0049: failed probing parameters: -71 [ 964.193815][ T5277] uclogic 0003:256C:006E.0049: probe with driver uclogic failed with error -71 [ 964.267303][ T5271] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 964.289633][ T5277] usb 3-1: USB disconnect, device number 61 [ 964.385230][ T937] usb 1-1: USB disconnect, device number 37 [ 964.482818][ T5271] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 964.531270][ T5271] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 964.569355][T18542] FAULT_INJECTION: forcing a failure. [ 964.569355][T18542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.590685][ T5271] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 964.631666][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.640380][T18542] CPU: 1 UID: 0 PID: 18542 Comm: syz.0.2923 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 964.650903][T18542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 964.661001][T18542] Call Trace: [ 964.664324][T18542] [ 964.667291][T18542] dump_stack_lvl+0x241/0x360 [ 964.672026][T18542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.677273][T18542] ? __pfx__printk+0x10/0x10 [ 964.681997][T18542] ? __pfx_lock_release+0x10/0x10 [ 964.687069][T18542] ? aa_label_sk_perm+0x4f3/0x6c0 [ 964.692132][T18542] should_fail_ex+0x3b0/0x4e0 [ 964.696872][T18542] _copy_from_iter+0x434/0x1d60 [ 964.701775][T18542] ? __pfx__copy_from_iter+0x10/0x10 [ 964.707139][T18542] bcm_sendmsg+0x157/0x7a0 [ 964.711668][T18542] ? __pfx_bcm_sendmsg+0x10/0x10 [ 964.716630][T18542] ? aa_sock_msg_perm+0x91/0x160 [ 964.721583][T18542] ? __pfx_bcm_sendmsg+0x10/0x10 [ 964.726536][T18542] __sock_sendmsg+0x221/0x270 [ 964.731227][T18542] ____sys_sendmsg+0x52a/0x7e0 [ 964.736123][T18542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 964.741453][T18542] __sys_sendmsg+0x2aa/0x390 [ 964.746092][T18542] ? __pfx___sys_sendmsg+0x10/0x10 [ 964.751250][T18542] ? vfs_write+0x7bf/0xc90 [ 964.755711][T18542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 964.762057][T18542] ? do_syscall_64+0x100/0x230 [ 964.766846][T18542] ? do_syscall_64+0xb6/0x230 [ 964.771555][T18542] do_syscall_64+0xf3/0x230 [ 964.776162][T18542] ? clear_bhb_loop+0x35/0x90 [ 964.780879][T18542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.786804][T18542] RIP: 0033:0x7f4236d7def9 [ 964.791226][T18542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.810875][T18542] RSP: 002b:00007f4237bc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.819303][T18542] RAX: ffffffffffffffda RBX: 00007f4236f35f80 RCX: 00007f4236d7def9 [ 964.827305][T18542] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 964.835295][T18542] RBP: 00007f4237bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 964.843276][T18542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.851266][T18542] R13: 0000000000000000 R14: 00007f4236f35f80 R15: 00007f423705fa28 [ 964.859258][T18542] [ 965.048775][T18512] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 965.128738][T18547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2924'. [ 965.165072][ T5271] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.348737][T18551] netlink: 'syz.4.2926': attribute type 9 has an invalid length. [ 965.367726][ T5271] usb 2-1: USB disconnect, device number 55 [ 965.475660][T18551] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2926'. [ 965.488951][T18555] blktrace: Concurrent blktraces are not allowed on nbd0 [ 965.997407][ T5271] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 966.237544][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.279206][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.341627][ T5271] usb 3-1: New USB device found, idVendor=0404, idProduct=2801, bcdDevice= 0.00 [ 966.387675][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.459451][ T5271] usb 3-1: config 0 descriptor?? [ 966.755557][ T5271] usbhid 3-1:0.0: can't add hid device: -71 [ 966.767216][ T5271] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 966.767262][ T5277] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 966.801064][ T5271] usb 3-1: USB disconnect, device number 62 [ 966.938282][ T5275] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 966.959401][T18587] dvmrp0: entered allmulticast mode [ 966.967592][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 966.979156][ T5277] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 967.001592][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 967.034481][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 967.044531][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 967.052004][T18586] dvmrp1: entered allmulticast mode [ 967.096070][ T5277] usb 1-1: Product: syz [ 967.100821][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 967.114742][ T5275] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 967.130780][ T5277] usb 1-1: Manufacturer: syz [ 967.135687][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.147833][ T5277] usb 1-1: SerialNumber: syz [ 967.156952][ T5275] usb 5-1: Product: syz [ 967.163577][ T5277] usb 1-1: config 0 descriptor?? [ 967.168786][ T5275] usb 5-1: Manufacturer: syz [ 967.179758][ T5277] hub 1-1:0.0: bad descriptor, ignoring hub [ 967.187219][ T5275] usb 5-1: SerialNumber: syz [ 967.193832][ T5277] hub 1-1:0.0: probe with driver hub failed with error -5 [ 967.204675][ T5275] usb 5-1: config 0 descriptor?? [ 967.213318][ T5277] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 967.221511][ T5275] gspca_main: spca500-2.14.0 probing 046d:0900 [ 967.317557][ T5269] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 967.383253][ T5277] gspca_zc3xx: reg_w_i err -71 [ 967.415270][T18580] loop4: detected capacity change from 0 to 7 [ 967.416986][ T5271] hid-generic 0000:0000:0000.004A: unknown main item tag 0x0 [ 967.430713][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.455627][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.484681][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.493415][ T5271] hid-generic 0000:0000:0000.004A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 967.511258][ T5269] usb 4-1: config index 0 descriptor too short (expected 4114, got 18) [ 967.527228][ T5269] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 967.542777][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.577123][ T5269] usb 4-1: config 0 has no interface number 0 [ 967.583816][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.602237][ T5269] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 967.617348][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.628214][ T5269] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 967.644891][ T5269] usb 4-1: config 0 interface 97 has no altsetting 0 [ 967.654640][ T5269] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 967.666502][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.673421][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.693165][ T5269] usb 4-1: Product: syz [ 967.704035][ T5269] usb 4-1: Manufacturer: syz [ 967.711417][ T5269] usb 4-1: SerialNumber: syz [ 967.730638][ T5269] usb 4-1: config 0 descriptor?? [ 967.746294][T18580] ldm_validate_partition_table(): Disk read failed. [ 967.747817][ T5275] gspca_spca500: reg write: error -32 [ 967.768134][ T5275] gspca_spca500: reg write: error -32 [ 967.782067][ T5275] gspca_spca500: reg write: error -32 [ 967.788823][ T5275] gspca_spca500: reg write: error -32 [ 967.794705][ T5275] gspca_spca500: reg write: error -32 [ 967.802068][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.802396][ T5275] gspca_spca500: reg write: error -32 [ 967.816881][ T5275] gspca_spca500: reg write: error -32 [ 967.832231][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.859701][ T5275] gspca_spca500: reg write: error -32 [ 967.873771][ T5275] gspca_spca500: reg write: error -32 [ 967.880451][T18580] Buffer I/O error on dev loop4, logical block 0, async page read [ 967.885556][ T5275] gspca_spca500: reg write: error -32 [ 967.904996][ T5275] gspca_spca500: reg write: error -32 [ 967.921776][ T5275] gspca_spca500: reg write: error -32 [ 967.932517][T18580] Dev loop4: unable to read RDB block 0 [ 967.945181][T18586] dvmrp0: left allmulticast mode [ 967.963665][ T5275] gspca_spca500: reg write: error -32 [ 967.970241][T18586] dvmrp1: left allmulticast mode [ 967.977607][T18580] loop4: unable to read partition table [ 967.977698][ T5275] gspca_spca500: reg write: error -32 [ 967.989119][ T5277] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 967.998359][ T5277] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 968.047985][T18580] loop4: partition table beyond EOD, truncated [ 968.107631][T18580] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 968.107631][T18580] ) failed (rc=-5) [ 968.154557][ T1167] usb 5-1: USB disconnect, device number 68 [ 968.188784][T18523] coredump: 9(syz.1.2918): written to core: VMAs: 36, size 99438592; core: 62112822 bytes, pos 99446784 [ 968.228026][ T5277] usb 1-1: USB disconnect, device number 38 [ 968.387305][ T5275] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 968.558238][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 968.575978][ T5275] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 968.584203][ T5277] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 968.598961][ T5275] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.649049][ T5275] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 968.719293][ T5269] asix 4-1:0.97 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 968.737277][ T5275] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 968.745162][ T5269] asix 4-1:0.97: probe with driver asix failed with error -71 [ 968.752967][ T5275] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.814720][ T5269] usb 4-1: USB disconnect, device number 54 [ 968.822282][ T5277] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 968.837677][ T5275] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 968.863440][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 968.874609][ T5275] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 968.882776][ T5275] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 968.895122][ T5275] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 968.927873][ T5275] usb 2-1: string descriptor 0 read error: -22 [ 968.937305][ T5275] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 968.966982][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.026971][ T5275] adutux 2-1:168.0: interrupt endpoints not found [ 969.038760][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 969.074208][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 969.118550][ T5277] usb 1-1: config 0 descriptor?? [ 969.136010][ T5277] usb 1-1: can't set config #0, error -71 [ 969.182241][ T5277] usb 1-1: USB disconnect, device number 39 [ 969.263881][ T5271] usb 2-1: USB disconnect, device number 56 [ 969.777308][ T5277] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 969.827253][ T5275] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 969.861400][T18617] netlink: 528 bytes leftover after parsing attributes in process `syz.0.2944'. [ 969.877248][ T5269] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 969.896027][T18617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2944'. [ 970.011805][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.028314][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.041258][ T5275] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 970.051062][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.068744][ T5277] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 970.093378][ T5275] usb 5-1: config 0 descriptor?? [ 970.110008][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.123482][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 970.137568][ T5275] cp210x 5-1:0.0: cp210x converter detected [ 970.151255][ T5277] usb 3-1: config 0 descriptor?? [ 970.157890][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.221218][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.284732][ T5269] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 970.339412][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.348165][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.378817][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.412864][ T5269] usb 4-1: config 0 descriptor?? [ 970.428845][ T5275] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 970.465377][ T5275] cp210x 5-1:0.0: querying part number failed [ 970.541864][ T5275] usb 5-1: cp210x converter now attached to ttyUSB0 [ 970.789592][ T937] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 970.912076][ T5277] usb 3-1: string descriptor 0 read error: -22 [ 971.128767][ T5277] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.004B/input/input74 [ 971.191197][ T5277] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.004B/input/input75 [ 971.327311][ T5277] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.004B/input/input76 [ 971.342596][T18630] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 971.492851][ T5277] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.004B/input/input77 [ 971.627828][ T5277] uclogic 0003:256C:006D.004B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 971.778852][T18628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.835960][ T5277] usb 3-1: USB disconnect, device number 63 [ 971.838113][T18628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.500082][T13552] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 972.591313][ T5269] usbhid 4-1:0.0: can't add hid device: -71 [ 972.611753][ T5269] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 972.670355][ T5269] usb 4-1: USB disconnect, device number 55 [ 972.697260][T13552] usb 1-1: Using ep0 maxpacket: 8 [ 972.714115][T13552] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 972.729709][ T5277] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 972.752278][T13552] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 972.786215][T13552] usb 1-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 972.819169][T13552] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 972.855983][T13552] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 972.888585][T13552] usb 1-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 972.907411][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 972.914473][T13552] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 972.935810][T13552] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 972.937353][ T5277] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.973131][ T5277] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 972.995735][ T5277] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 973.017292][ T5277] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.033363][ T5277] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 973.047930][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.078890][T13552] usb 1-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 973.084570][ T5269] usb 5-1: USB disconnect, device number 69 [ 973.134598][T13552] usb 1-1: string descriptor 0 read error: -22 [ 973.144521][ T5269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 973.177650][ T5269] cp210x 5-1:0.0: device disconnected [ 973.179293][T13552] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 973.206740][T13552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.238486][T13552] adutux 1-1:168.0: interrupt endpoints not found [ 973.319688][ T5277] usb 2-1: GET_CAPABILITIES returned 0 [ 973.319729][ T5277] usbtmc 2-1:16.0: can't read capabilities [ 973.456733][T18641] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 973.472301][ T937] usb 1-1: USB disconnect, device number 41 [ 973.547288][T18643] usb usb8: usbfs: process 18643 (syz.1.2950) did not claim interface 0 before use [ 973.567519][T13552] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 973.598943][T18643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.619028][T18643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.734847][T13552] usb 3-1: Using ep0 maxpacket: 16 [ 973.746823][T13552] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 973.759356][T13552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 973.783372][T13552] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 973.794901][T13552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.803525][T13552] usb 3-1: Product: syz [ 973.809958][T13552] usb 3-1: Manufacturer: syz [ 973.814844][T13552] usb 3-1: SerialNumber: syz [ 973.819968][T18663] sctp: [Deprecated]: syz.4.2956 (pid 18663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 973.819968][T18663] Use struct sctp_sack_info instead [ 973.828539][T13552] usb 3-1: config 0 descriptor?? [ 973.860467][T13552] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 973.888697][ T5277] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 974.064309][ T5277] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 974.075543][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.094961][ T5277] usb 4-1: Product: syz [ 974.100465][ T5277] usb 4-1: Manufacturer: syz [ 974.107165][ T5277] usb 4-1: SerialNumber: syz [ 974.138123][ T5277] r8152-cfgselector 4-1: Unknown version 0x0000 [ 974.144648][ T5277] r8152-cfgselector 4-1: config 0 descriptor?? [ 974.179316][ T5269] usb 2-1: USB disconnect, device number 57 [ 974.275448][T13552] usb 3-1: USB disconnect, device number 64 [ 974.560336][T18659] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2955'. [ 974.576637][T13552] r8152-cfgselector 4-1: USB disconnect, device number 56 [ 977.412933][T18675] blktrace: Concurrent blktraces are not allowed on nbd2 [ 977.440210][T18674] fuse: Bad value for 'fd' [ 977.648488][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 977.648508][ T29] audit: type=1326 audit(1727102680.756:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 977.677148][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.692031][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2963'. [ 977.708797][ T29] audit: type=1326 audit(1727102680.786:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 977.731237][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.737653][ T5272] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 977.758989][ T29] audit: type=1326 audit(1727102680.786:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 977.781728][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.791639][T18681] libceph: resolve '0.0' (ret=-3): failed [ 977.797747][ T29] audit: type=1326 audit(1727102680.786:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 977.849781][ T29] audit: type=1326 audit(1727102680.786:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 977.918746][ T5272] usb 2-1: Using ep0 maxpacket: 16 [ 977.996687][ T5272] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.039418][ T5272] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 978.052508][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.061129][ T29] audit: type=1326 audit(1727102680.786:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 978.095312][ T5272] usb 2-1: Product: syz [ 978.100919][ T5272] usb 2-1: Manufacturer: syz [ 978.108081][ T5272] usb 2-1: SerialNumber: syz [ 978.115619][ T5272] usb 2-1: config 0 descriptor?? [ 978.121408][ T29] audit: type=1326 audit(1727102680.796:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 978.143924][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.283933][ T29] audit: type=1326 audit(1727102680.796:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 978.344761][ T29] audit: type=1326 audit(1727102680.796:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 978.389022][ T29] audit: type=1326 audit(1727102680.796:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18680 comm="syz.0.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236d7def9 code=0x7ffc0000 [ 978.399037][ T937] usb 2-1: USB disconnect, device number 58 [ 978.461565][T18700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2966'. [ 979.155872][T18721] FAULT_INJECTION: forcing a failure. [ 979.155872][T18721] name failslab, interval 1, probability 0, space 0, times 0 [ 979.169133][T18721] CPU: 1 UID: 0 PID: 18721 Comm: syz.1.2971 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 979.179576][T18721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 979.189675][T18721] Call Trace: [ 979.192966][T18721] [ 979.195909][T18721] dump_stack_lvl+0x241/0x360 [ 979.200621][T18721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.205846][T18721] ? __pfx__printk+0x10/0x10 [ 979.210458][T18721] should_fail_ex+0x3b0/0x4e0 [ 979.215153][T18721] ? skb_clone+0x20c/0x390 [ 979.219588][T18721] should_failslab+0xac/0x100 [ 979.224326][T18721] ? skb_clone+0x20c/0x390 [ 979.228784][T18721] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 979.234198][T18721] skb_clone+0x20c/0x390 [ 979.238470][T18721] ? dev_queue_xmit_nit+0x220/0xc10 [ 979.243682][T18721] dev_queue_xmit_nit+0x419/0xc10 [ 979.248718][T18721] ? dev_queue_xmit_nit+0x2b/0xc10 [ 979.253841][T18721] ? validate_xmit_skb+0x9f9/0x1120 [ 979.259069][T18721] dev_hard_start_xmit+0x15f/0x7e0 [ 979.264199][T18721] ? __pfx_validate_xmit_skb+0x10/0x10 [ 979.269675][T18721] __dev_queue_xmit+0x1b58/0x3e80 [ 979.274714][T18721] ? kasan_save_track+0x51/0x80 [ 979.279603][T18721] ? do_syscall_64+0xf3/0x230 [ 979.284299][T18721] ? __dev_queue_xmit+0x2da/0x3e80 [ 979.289437][T18721] ? __pfx___dev_queue_xmit+0x10/0x10 [ 979.294839][T18721] ? __copy_skb_header+0x437/0x5b0 [ 979.299965][T18721] ? __asan_memcpy+0x40/0x70 [ 979.304599][T18721] ? skb_clone+0x240/0x390 [ 979.309039][T18721] __netlink_deliver_tap+0x54d/0x7c0 [ 979.314354][T18721] ? netlink_deliver_tap+0x2e/0x1b0 [ 979.319579][T18721] netlink_deliver_tap+0x19d/0x1b0 [ 979.324721][T18721] netlink_unicast+0x7c4/0x990 [ 979.331094][T18721] ? __pfx_netlink_unicast+0x10/0x10 [ 979.331132][T18721] ? __virt_addr_valid+0x183/0x530 [ 979.341544][T18721] ? __check_object_size+0x48e/0x900 [ 979.346947][T18721] netlink_sendmsg+0x8e4/0xcb0 [ 979.351726][T18721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.357043][T18721] ? aa_sock_msg_perm+0x91/0x160 [ 979.362009][T18721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 979.367312][T18721] __sock_sendmsg+0x221/0x270 [ 979.372098][T18721] ____sys_sendmsg+0x52a/0x7e0 [ 979.376877][T18721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 979.382197][T18721] __sys_sendmsg+0x2aa/0x390 [ 979.386805][T18721] ? __pfx___sys_sendmsg+0x10/0x10 [ 979.392027][T18721] ? vfs_write+0x7bf/0xc90 [ 979.396515][T18721] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 979.402876][T18721] ? do_syscall_64+0x100/0x230 [ 979.407672][T18721] ? do_syscall_64+0xb6/0x230 [ 979.412384][T18721] do_syscall_64+0xf3/0x230 [ 979.416904][T18721] ? clear_bhb_loop+0x35/0x90 [ 979.421600][T18721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.427506][T18721] RIP: 0033:0x7f049d97def9 [ 979.431928][T18721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.451542][T18721] RSP: 002b:00007f049e805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.459965][T18721] RAX: ffffffffffffffda RBX: 00007f049db35f80 RCX: 00007f049d97def9 [ 979.467942][T18721] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 979.475913][T18721] RBP: 00007f049e805090 R08: 0000000000000000 R09: 0000000000000000 [ 979.483971][T18721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.491955][T18721] R13: 0000000000000000 R14: 00007f049db35f80 R15: 00007f049dc5fa28 [ 979.500203][T18721] [ 979.844703][T18725] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 979.866667][T18725] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2972'. [ 979.882740][T18728] blktrace: Concurrent blktraces are not allowed on nbd3 [ 980.087297][ T5272] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 980.126814][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2976'. [ 980.162310][T18733] vlan2: entered promiscuous mode [ 980.195818][T18733] macvlan0: entered promiscuous mode [ 980.206894][T18733] macvlan0: left promiscuous mode [ 980.247373][ T5272] usb 5-1: Using ep0 maxpacket: 16 [ 980.265193][ T5272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.290338][ T5272] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 980.317309][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.345806][ T5272] usb 5-1: Product: syz [ 980.355946][ T5272] usb 5-1: Manufacturer: syz [ 980.366092][ T5272] usb 5-1: SerialNumber: syz [ 980.386053][ T5272] usb 5-1: config 0 descriptor?? [ 980.933294][ T5272] usb 5-1: Cannot retrieve CPort count: -110 [ 980.957525][ T5272] usb 5-1: Cannot retrieve CPort count: -110 [ 980.974245][ T5272] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 981.281989][ T5277] usb 5-1: USB disconnect, device number 70 [ 981.694089][T18770] sctp: [Deprecated]: syz.2.2987 (pid 18770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 981.694089][T18770] Use struct sctp_sack_info instead [ 981.957289][ T5277] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 982.017289][ T937] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 982.137393][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 982.152401][ T5277] usb 5-1: too many configurations: 148, using maximum allowed: 8 [ 982.172213][ T5277] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 982.207322][ T5277] usb 5-1: can't read configurations, error -61 [ 982.330638][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.341745][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.361145][ T937] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 982.377788][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.388080][ T5277] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 982.454038][ T937] usb 4-1: config 0 descriptor?? [ 982.579101][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 982.583061][ T2987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.594384][ T5277] usb 5-1: too many configurations: 148, using maximum allowed: 8 [ 982.668138][ T5277] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 982.716475][ T5277] usb 5-1: can't read configurations, error -61 [ 982.740618][ T2987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.745353][ T5277] usb usb5-port1: attempt power cycle [ 982.932450][ T937] hid (null): bogus close delimiter [ 983.032802][ T2987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.127240][ T5277] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 983.132752][ T937] usb 4-1: language id specifier not provided by device, defaulting to English [ 983.178586][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 983.187200][ T5277] usb 5-1: too many configurations: 148, using maximum allowed: 8 [ 983.191301][ T2987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.218244][ T5277] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 983.228098][ T5277] usb 5-1: can't read configurations, error -61 [ 983.315262][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 983.325935][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 983.350866][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 983.363341][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 983.375343][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 983.383218][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 983.398813][ T5277] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 983.491136][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 983.539400][ T5277] usb 5-1: too many configurations: 148, using maximum allowed: 8 [ 983.597041][ T2987] bridge_slave_1: left allmulticast mode [ 983.598277][ T5277] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 983.625992][ T5277] usb 5-1: can't read configurations, error -61 [ 983.629677][ T2987] bridge_slave_1: left promiscuous mode [ 983.644343][ T5277] usb usb5-port1: unable to enumerate USB device [ 983.662418][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.708336][ T2987] bridge_slave_0: left allmulticast mode [ 983.723149][ T2987] bridge_slave_0: left promiscuous mode [ 983.735968][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.018814][T18817] sctp: [Deprecated]: syz.1.3003 (pid 18817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.018814][T18817] Use struct sctp_sack_info instead [ 985.099205][ T5277] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 985.132146][ T937] uclogic 0003:256C:006D.004C: failed retrieving Huion firmware version: -71 [ 985.153684][ T937] uclogic 0003:256C:006D.004C: failed probing parameters: -71 [ 985.189132][ T937] uclogic 0003:256C:006D.004C: probe with driver uclogic failed with error -71 [ 985.248691][ T937] usb 4-1: USB disconnect, device number 57 [ 985.397181][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 985.404039][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 985.415380][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.425484][ T5277] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 985.434588][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.442923][T15721] Bluetooth: hci1: command tx timeout [ 985.522408][ T5277] usb 5-1: config 0 descriptor?? [ 985.665432][ T2987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.710373][ T2987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.761311][ T2987] bond0 (unregistering): Released all slaves [ 985.954837][ T5277] usbhid 5-1:0.0: can't add hid device: -71 [ 985.968409][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 985.979969][ T5277] usb 5-1: USB disconnect, device number 75 [ 985.997956][ T937] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 986.162520][T18830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3007'. [ 986.197380][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 986.216823][T18830] vlan2: entered promiscuous mode [ 986.230134][ T937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.248680][T18830] gretap0: entered promiscuous mode [ 986.254880][ T937] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 986.265636][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.295669][ T937] usb 3-1: config 0 descriptor?? [ 986.322642][ T937] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 986.734533][ T2987] hsr_slave_0: left promiscuous mode [ 986.787928][ T2987] hsr_slave_1: left promiscuous mode [ 986.803729][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.814101][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.823987][ T2987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.831768][ T2987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.886134][ T2987] veth1_macvtap: left promiscuous mode [ 986.892287][ T2987] veth0_macvtap: left promiscuous mode [ 986.899838][ T2987] veth1_vlan: left promiscuous mode [ 986.905380][ T2987] veth0_vlan: left promiscuous mode [ 987.069171][ T51] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 987.233196][ T51] usb 2-1: unable to get BOS descriptor or descriptor too short [ 987.249753][ T51] usb 2-1: not running at top speed; connect to a high speed hub [ 987.262206][ T51] usb 2-1: config 0 interface 0 has no altsetting 0 [ 987.282084][ T51] usb 2-1: string descriptor 0 read error: -22 [ 987.288978][ T51] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 987.299533][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.321918][ T51] usb 2-1: config 0 descriptor?? [ 987.335386][ T51] gspca_main: spca501-2.14.0 probing 0497:c001 [ 987.351501][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'. [ 987.522535][ T54] Bluetooth: hci1: command tx timeout [ 987.565778][ T937] gspca_vc032x: reg_w err -71 [ 987.571095][ T937] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 987.588621][T18852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.625533][T18852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.629240][ T937] usb 3-1: USB disconnect, device number 65 [ 987.817596][ T2987] team0 (unregistering): Port device team_slave_1 removed [ 987.851252][ T51] gspca_spca501: reg write: error -110 [ 987.856784][ T51] spca501 2-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 987.868051][ T51] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 987.908604][ T2987] team0 (unregistering): Port device team_slave_0 removed [ 988.634081][ T1167] usb 2-1: USB disconnect, device number 59 [ 988.755419][T18799] chnl_net:caif_netlink_parms(): no params data found [ 988.961803][T18867] netlink: 'syz.4.3014': attribute type 8 has an invalid length. [ 989.123172][T18799] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.139442][T18799] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.157531][T18799] bridge_slave_0: entered allmulticast mode [ 989.175231][T18799] bridge_slave_0: entered promiscuous mode [ 989.227512][T18799] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.267521][T18799] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.274869][T18799] bridge_slave_1: entered allmulticast mode [ 989.315883][T18799] bridge_slave_1: entered promiscuous mode [ 989.475415][T18799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.491662][T18890] FAULT_INJECTION: forcing a failure. [ 989.491662][T18890] name failslab, interval 1, probability 0, space 0, times 0 [ 989.520791][T18799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.532780][T18890] CPU: 1 UID: 0 PID: 18890 Comm: syz.1.3018 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 989.543363][T18890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 989.553982][T18890] Call Trace: [ 989.557297][T18890] [ 989.560269][T18890] dump_stack_lvl+0x241/0x360 [ 989.565008][T18890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.570260][T18890] ? __pfx__printk+0x10/0x10 [ 989.574911][T18890] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 989.580948][T18890] ? __pfx___might_resched+0x10/0x10 [ 989.586306][T18890] should_fail_ex+0x3b0/0x4e0 [ 989.591079][T18890] should_failslab+0xac/0x100 [ 989.595897][T18890] ? __alloc_skb+0x1c3/0x440 [ 989.600542][T18890] kmem_cache_alloc_node_noprof+0x71/0x320 [ 989.606412][T18890] __alloc_skb+0x1c3/0x440 [ 989.610887][T18890] ? __pfx___alloc_skb+0x10/0x10 [ 989.615879][T18890] ? netlink_ack_tlv_len+0x6e/0x200 [ 989.621141][T18890] netlink_ack+0x13f/0xa30 [ 989.625606][T18890] ? __pfx_lock_acquire+0x10/0x10 [ 989.630702][T18890] netlink_rcv_skb+0x262/0x430 [ 989.635518][T18890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.640604][T18890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.645956][T18890] ? __netlink_deliver_tap+0x77e/0x7c0 [ 989.651482][T18890] genl_rcv+0x28/0x40 [ 989.655530][T18890] netlink_unicast+0x7f6/0x990 [ 989.660375][T18890] ? __pfx_netlink_unicast+0x10/0x10 [ 989.665702][T18890] ? __virt_addr_valid+0x183/0x530 [ 989.670864][T18890] ? __check_object_size+0x48e/0x900 [ 989.676211][T18890] netlink_sendmsg+0x8e4/0xcb0 [ 989.681037][T18890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.686379][T18890] ? aa_sock_msg_perm+0x91/0x160 [ 989.691377][T18890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.696722][T18890] __sock_sendmsg+0x221/0x270 [ 989.701453][T18890] ____sys_sendmsg+0x52a/0x7e0 [ 989.706279][T18890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.711647][T18890] __sys_sendmsg+0x2aa/0x390 [ 989.716295][T18890] ? __pfx___sys_sendmsg+0x10/0x10 [ 989.721502][T18890] ? vfs_write+0x7bf/0xc90 [ 989.725982][T18890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 989.732334][T18890] ? do_syscall_64+0x100/0x230 [ 989.737127][T18890] ? do_syscall_64+0xb6/0x230 [ 989.741826][T18890] do_syscall_64+0xf3/0x230 [ 989.746347][T18890] ? clear_bhb_loop+0x35/0x90 [ 989.751056][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.756997][T18890] RIP: 0033:0x7f049d97def9 [ 989.761457][T18890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.779404][ T1167] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 989.781058][T18890] RSP: 002b:00007f049e805038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.781092][T18890] RAX: ffffffffffffffda RBX: 00007f049db35f80 RCX: 00007f049d97def9 [ 989.805058][T18890] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 989.813048][T18890] RBP: 00007f049e805090 R08: 0000000000000000 R09: 0000000000000000 [ 989.821050][T18890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.829072][T18890] R13: 0000000000000000 R14: 00007f049db35f80 R15: 00007f049dc5fa28 [ 989.837114][T18890] [ 989.851605][ T54] Bluetooth: hci1: command tx timeout [ 989.969522][ T1167] usb 5-1: Using ep0 maxpacket: 8 [ 989.998921][ T1167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 990.010524][ T1167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.020416][ T1167] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 990.029575][ T1167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.046506][ T1167] usb 5-1: config 0 descriptor?? [ 990.069470][T18799] team0: Port device team_slave_0 added [ 990.099463][T18799] team0: Port device team_slave_1 added [ 990.124298][T18900] fuse: Bad value for 'fd' [ 990.135910][T18799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.147444][T18799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.183549][T18799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.199563][T18799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.206606][T18799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.233171][T18799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.244065][ T5272] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 990.315038][T18799] hsr_slave_0: entered promiscuous mode [ 990.321246][ T5275] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 990.332651][T18799] hsr_slave_1: entered promiscuous mode [ 990.348019][T18799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.355623][T18799] Cannot create hsr debugfs directory [ 990.409312][ T5272] usb 2-1: Using ep0 maxpacket: 8 [ 990.438448][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 59391, setting to 1024 [ 990.464803][ T5272] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 990.469456][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 990.481754][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 990.489287][ T5275] usb 4-1: device descriptor read/64, error -71 [ 990.495666][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 990.499277][ T5272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.502954][ T1167] usbhid 5-1:0.0: can't add hid device: -32 [ 990.525003][ T1167] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 990.537647][ T5272] usb 2-1: Product: syz [ 990.541986][ T5272] usb 2-1: Manufacturer: syz [ 990.555261][ T1167] usb 5-1: USB disconnect, device number 76 [ 990.578475][ T5272] usb 2-1: SerialNumber: syz [ 990.618344][ T5272] usb 2-1: config 0 descriptor?? [ 990.625090][T18898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 990.681943][ T5272] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 990.691638][ T5272] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 990.700772][ T5272] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 990.777400][ T5275] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 990.917369][ T5275] usb 4-1: device descriptor read/64, error -71 [ 991.060507][ T5275] usb usb4-port1: attempt power cycle [ 991.423882][ T5272] usb 2-1: USB disconnect, device number 60 [ 991.442629][ T5275] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 991.488909][ T5275] usb 4-1: device descriptor read/8, error -71 [ 991.512200][T18799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 991.526389][T18799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 991.536961][T18799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 991.549113][T18799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 991.587357][ T1167] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 991.675322][T18799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.751002][ T5275] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 991.767096][ T1167] usb 5-1: Using ep0 maxpacket: 16 [ 991.782955][T18799] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.793130][ T1167] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.810550][ T1167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 991.828250][ T5275] usb 4-1: device descriptor read/8, error -71 [ 991.833303][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.835431][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.841652][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.873041][ T1167] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 991.904257][ T1167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.916046][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.923263][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.928791][ T1167] usb 5-1: Product: syz [ 991.941750][ T54] Bluetooth: hci1: command tx timeout [ 991.947844][ T5275] usb usb4-port1: unable to enumerate USB device [ 991.967306][ T1167] usb 5-1: Manufacturer: syz [ 991.987876][ T1167] usb 5-1: SerialNumber: syz [ 991.995218][ T1167] usb 5-1: config 0 descriptor?? [ 992.038612][ T1167] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 992.063817][ T1167] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 992.199336][T18799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.246019][T18932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.257613][ T1167] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 992.326629][T18799] veth0_vlan: entered promiscuous mode [ 992.342505][T18932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.390254][T18799] veth1_vlan: entered promiscuous mode [ 992.430438][T18932] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 992.437091][T18932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 992.477820][T18932] vhci_hcd vhci_hcd.0: Device attached [ 992.508967][ T5272] usb 5-1: USB disconnect, device number 77 [ 992.515240][T18950] vhci_hcd: connection closed [ 992.522642][T18799] veth0_macvtap: entered promiscuous mode [ 992.538274][T18799] veth1_macvtap: entered promiscuous mode [ 992.580317][ T63] vhci_hcd: stop threads [ 992.584724][ T63] vhci_hcd: release socket [ 992.589418][ T63] vhci_hcd: disconnect device [ 992.611882][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.623138][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.633714][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.646053][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.656422][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.666992][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.677113][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.687671][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.697546][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.708079][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.724676][T18799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.734904][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.745652][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.755641][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.766223][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.776333][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.786844][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.796735][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.807340][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.817309][T18799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.828329][T18799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.842086][T18799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.854311][T18799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.863215][T18799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.872167][T18799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.881036][T18799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.310062][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.316417][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.416741][T13752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.425200][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.433692][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.454641][T13752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.127307][ T1167] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 994.147617][ T5269] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 994.304823][ T1167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.345219][ T1167] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.363802][ T5269] usb 4-1: config 0 has no interfaces? [ 994.376540][ T5269] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 994.408983][ T1167] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 994.429401][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.445000][ T1167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.504248][ T5269] usb 4-1: config 0 descriptor?? [ 994.510190][ T1167] usb 1-1: config 0 descriptor?? [ 994.778965][ T1167] usbhid 1-1:0.0: can't add hid device: -71 [ 994.793618][ T1167] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 994.812693][ T1167] usb 1-1: USB disconnect, device number 42 [ 995.162746][T13749] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.334742][T13552] usb 4-1: USB disconnect, device number 62 [ 995.631198][T13749] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.747022][T15721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 995.763385][T15721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 995.786409][T15721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 995.816586][T15721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 995.833264][T15721] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 995.847520][T15721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 996.012445][T13749] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.213873][T13749] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.300668][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 996.312341][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 996.328630][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 996.336624][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 996.344376][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 996.352234][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 997.084027][T19025] chnl_net:caif_netlink_parms(): no params data found [ 997.108644][T13749] bridge_slave_1: left allmulticast mode [ 997.114385][T13749] bridge_slave_1: left promiscuous mode [ 997.124726][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.148218][T13749] bridge_slave_0: left allmulticast mode [ 997.153928][T13749] bridge_slave_0: left promiscuous mode [ 997.160030][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.926395][ T54] Bluetooth: hci4: command tx timeout [ 998.048176][T13749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.093081][T13749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.117306][T13749] bond0 (unregistering): Released all slaves [ 998.599181][T19025] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.627471][T19025] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.637403][ T54] Bluetooth: hci0: command tx timeout [ 998.660251][T19025] bridge_slave_0: entered allmulticast mode [ 998.686454][T19025] bridge_slave_0: entered promiscuous mode [ 998.822644][T19025] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.853369][T19025] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.863098][T19025] bridge_slave_1: entered allmulticast mode [ 998.882109][T19025] bridge_slave_1: entered promiscuous mode [ 999.069853][T13749] hsr_slave_0: left promiscuous mode [ 999.078153][T13749] hsr_slave_1: left promiscuous mode [ 999.091971][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.106968][T13749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.118082][T13749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.125626][T13749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.156436][T13749] veth1_macvtap: left promiscuous mode [ 999.171131][T13749] veth0_macvtap: left promiscuous mode [ 999.176800][T13749] veth1_vlan: left promiscuous mode [ 999.190862][T13749] veth0_vlan: left promiscuous mode [ 999.787475][T13749] team0 (unregistering): Port device team_slave_1 removed [ 999.855502][T13749] team0 (unregistering): Port device team_slave_0 removed [ 1000.006487][ T54] Bluetooth: hci4: command tx timeout [ 1000.404437][T19048] chnl_net:caif_netlink_parms(): no params data found [ 1000.436491][T19025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.501572][T19025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.594348][T19025] team0: Port device team_slave_0 added [ 1000.600515][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3081'. [ 1000.635388][T19025] team0: Port device team_slave_1 added [ 1000.719682][ T54] Bluetooth: hci0: command tx timeout [ 1000.945842][T19147] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1000.969580][T19025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.976589][T19025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.018133][T19025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.034314][T19025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.041682][T19025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.068030][T19025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.124245][T19048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.167981][T19048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.185570][T19048] bridge_slave_0: entered allmulticast mode [ 1001.199617][T19048] bridge_slave_0: entered promiscuous mode [ 1001.382812][T19048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.417201][T19048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.435750][T19048] bridge_slave_1: entered allmulticast mode [ 1001.449001][T19048] bridge_slave_1: entered promiscuous mode [ 1001.475314][T19166] dccp_close: ABORT with 64 bytes unread [ 1001.515718][T19025] hsr_slave_0: entered promiscuous mode [ 1001.537786][T19025] hsr_slave_1: entered promiscuous mode [ 1001.558363][T19025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1001.571932][T19025] Cannot create hsr debugfs directory [ 1001.603392][T19172] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1001.701504][T19048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.740158][T19048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.972832][T19048] team0: Port device team_slave_0 added [ 1001.999741][T19194] netlink: 'syz.0.3097': attribute type 21 has an invalid length. [ 1002.013680][T19194] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1002.042192][T19048] team0: Port device team_slave_1 added [ 1002.077231][T15721] Bluetooth: hci4: command tx timeout [ 1002.087299][T19194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1002.222549][T19209] openvswitch: netlink: Actions may not be safe on all matching packets [ 1002.289734][T13749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.355382][T19048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.362812][T19048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.389172][T19048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.403136][T19048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.410307][T19048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.436371][T19048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.566159][T19219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1002.580621][T13749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.803206][T15721] Bluetooth: hci0: command tx timeout [ 1002.998151][T13749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.028116][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1003.140307][T13749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.211993][T19048] hsr_slave_0: entered promiscuous mode [ 1003.228216][T19048] hsr_slave_1: entered promiscuous mode [ 1003.247357][T19048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.254981][T19048] Cannot create hsr debugfs directory [ 1003.270897][T19240] xt_CONNSECMARK: invalid mode: 0 [ 1004.157812][T15721] Bluetooth: hci4: command tx timeout [ 1004.479890][T13749] bridge_slave_1: left allmulticast mode [ 1004.497328][T13749] bridge_slave_1: left promiscuous mode [ 1004.503102][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.546190][T13749] bridge_slave_0: left allmulticast mode [ 1004.563514][T13749] bridge_slave_0: left promiscuous mode [ 1004.577748][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.763210][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1004.763231][ T29] audit: type=1326 audit(1727102707.866:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1004.837628][ T29] audit: type=1326 audit(1727102707.906:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1004.881804][T15721] Bluetooth: hci0: command tx timeout [ 1004.901813][ T29] audit: type=1326 audit(1727102707.906:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1004.952390][ T29] audit: type=1326 audit(1727102707.906:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1004.975382][ T29] audit: type=1326 audit(1727102707.906:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1004.998354][ T29] audit: type=1326 audit(1727102707.906:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1005.021154][ T29] audit: type=1326 audit(1727102707.906:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1005.044360][ T29] audit: type=1326 audit(1727102707.906:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1005.068046][ T29] audit: type=1326 audit(1727102707.906:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1005.090700][ T29] audit: type=1326 audit(1727102707.906:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19274 comm="syz.0.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9208b7def9 code=0x7ffc0000 [ 1005.242477][T13749] gretap0 (unregistering): left promiscuous mode [ 1005.279867][ T1167] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1005.432128][ T1167] usb 1-1: device descriptor read/64, error -71 [ 1005.533114][T13749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.544902][T13749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.558066][T13749] bond0 (unregistering): Released all slaves [ 1005.687738][ T1167] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1005.857354][ T1167] usb 1-1: device descriptor read/64, error -71 [ 1005.968342][ T1167] usb usb1-port1: attempt power cycle [ 1006.370729][ T1167] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1006.429245][ T1167] usb 1-1: device descriptor read/8, error -71 [ 1006.524796][T19309] openvswitch: netlink: Actions may not be safe on all matching packets [ 1006.697298][ T1167] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1006.716578][T19313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1006.758492][ T1167] usb 1-1: device descriptor read/8, error -71 [ 1006.888248][ T1167] usb usb1-port1: unable to enumerate USB device [ 1006.984411][T19319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3136'. [ 1017.683024][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1017.695428][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1017.704928][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1017.716600][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1017.724308][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1017.733165][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1018.308785][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1018.319196][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1018.328425][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1018.336948][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1018.345340][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1018.357518][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1018.929058][T15721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1018.942687][T15721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1018.955675][T15721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1018.963849][T15721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1018.972173][T15721] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1018.979674][T15721] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1019.837376][T15721] Bluetooth: hci5: command tx timeout [ 1020.397333][T15721] Bluetooth: hci6: command tx timeout [ 1021.037304][T15721] Bluetooth: hci7: command tx timeout [ 1021.917452][T15721] Bluetooth: hci5: command tx timeout [ 1022.477236][T15721] Bluetooth: hci6: command tx timeout [ 1023.117253][T15721] Bluetooth: hci7: command tx timeout [ 1023.998686][T15721] Bluetooth: hci5: command tx timeout [ 1024.557271][T15721] Bluetooth: hci6: command tx timeout [ 1025.215547][T15721] Bluetooth: hci7: command tx timeout [ 1026.077329][T15721] Bluetooth: hci5: command tx timeout [ 1026.637300][T15721] Bluetooth: hci6: command tx timeout [ 1027.277290][T15721] Bluetooth: hci7: command tx timeout [ 1032.947073][ C1] sched: DL replenish lagged too much [ 1045.481987][T19323] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1045.568027][T19323] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1045.576601][T19323] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1054.721789][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.736392][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.645437][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1056.659871][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1056.677446][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1056.695426][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1056.710076][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1056.717946][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1056.793726][T15721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.812844][T15721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.824072][T15721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.835571][T15721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.843811][T15721] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1056.852582][T15721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1058.797323][T15721] Bluetooth: hci1: command tx timeout [ 1058.877566][T15721] Bluetooth: hci2: command tx timeout [ 1060.877382][T15721] Bluetooth: hci1: command tx timeout [ 1060.957448][T15721] Bluetooth: hci2: command tx timeout [ 1062.957282][T15721] Bluetooth: hci1: command tx timeout [ 1063.037532][ T54] Bluetooth: hci2: command tx timeout [ 1065.037116][T15721] Bluetooth: hci1: command tx timeout [ 1065.127277][T15721] Bluetooth: hci2: command tx timeout [ 1079.640493][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1079.653009][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1079.662893][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1079.671433][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1079.683898][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1079.697360][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1079.774448][T15721] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1079.797685][T15721] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1079.806806][T15721] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1079.815365][T15721] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1079.826523][T15721] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1079.834766][T15721] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1080.315604][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1080.331736][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1080.341293][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1080.349888][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1080.357941][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1080.365260][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1081.757234][ T54] Bluetooth: hci3: command tx timeout [ 1081.917346][ T54] Bluetooth: hci8: command tx timeout [ 1082.399681][ T54] Bluetooth: hci9: command tx timeout [ 1083.837189][ T54] Bluetooth: hci3: command tx timeout [ 1083.997283][ T54] Bluetooth: hci8: command tx timeout [ 1084.477227][ T54] Bluetooth: hci9: command tx timeout [ 1085.917185][ T54] Bluetooth: hci3: command tx timeout [ 1086.077539][ T54] Bluetooth: hci8: command tx timeout [ 1086.557223][ T54] Bluetooth: hci9: command tx timeout [ 1087.998988][ T54] Bluetooth: hci3: command tx timeout [ 1088.167575][ T54] Bluetooth: hci8: command tx timeout [ 1088.637359][ T54] Bluetooth: hci9: command tx timeout [ 1116.161404][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.184994][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.255435][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 1119.459335][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1119.470337][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1119.478599][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1119.489900][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1119.499668][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1119.507711][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1119.585260][T15721] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1119.602547][T15721] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1119.612465][T15721] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1119.621089][T15721] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1119.629303][T15721] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1119.636800][T15721] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1121.597305][T15721] Bluetooth: hci10: command tx timeout [ 1121.677363][T15721] Bluetooth: hci11: command tx timeout [ 1123.375045][T15721] Bluetooth: hci0: command 0x0406 tx timeout [ 1123.677400][ T54] Bluetooth: hci10: command tx timeout [ 1123.757277][ T54] Bluetooth: hci11: command tx timeout [ 1125.757293][ T54] Bluetooth: hci10: command tx timeout [ 1125.837411][ T54] Bluetooth: hci11: command tx timeout [ 1127.837241][ T54] Bluetooth: hci10: command tx timeout [ 1127.917415][ T54] Bluetooth: hci11: command tx timeout [ 1140.434685][T15721] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1140.447523][T15721] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1140.459234][T15721] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1140.467534][T15721] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1140.475488][T15721] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1140.489781][T15721] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1140.568507][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1140.586334][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1140.598266][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1140.606966][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1140.617823][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1140.625343][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1141.210944][T15721] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1141.224959][T15721] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1141.237250][T15721] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1141.248018][T15721] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1141.255997][T15721] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1141.264059][T15721] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1142.557258][T19392] Bluetooth: hci12: command tx timeout [ 1142.717271][T19392] Bluetooth: hci13: command tx timeout [ 1143.357529][T19392] Bluetooth: hci14: command tx timeout [ 1143.852796][T19392] Bluetooth: hci7: command 0x0406 tx timeout [ 1143.872598][T19392] Bluetooth: hci5: command 0x0406 tx timeout [ 1143.879300][T19392] Bluetooth: hci6: command 0x0406 tx timeout [ 1144.637145][ T5226] Bluetooth: hci12: command tx timeout [ 1144.797241][ T5226] Bluetooth: hci13: command tx timeout [ 1145.457123][ T5226] Bluetooth: hci14: command tx timeout [ 1146.717426][ T5226] Bluetooth: hci12: command tx timeout [ 1146.878091][ T5226] Bluetooth: hci13: command tx timeout [ 1147.517604][ T5226] Bluetooth: hci14: command tx timeout [ 1148.797404][ T5226] Bluetooth: hci12: command tx timeout [ 1148.957317][ T5226] Bluetooth: hci13: command tx timeout [ 1149.607516][ T5226] Bluetooth: hci14: command tx timeout [ 1153.277831][ T30] INFO: task syz-executor:19025 blocked for more than 143 seconds. [ 1153.286575][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1153.337086][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1153.345825][ T30] task:syz-executor state:D stack:21728 pid:19025 tgid:19025 ppid:1 flags:0x00000004 [ 1153.408555][ T30] Call Trace: [ 1153.411911][ T30] [ 1153.414885][ T30] __schedule+0x1895/0x4b30 [ 1153.505909][ T30] ? __pfx___schedule+0x10/0x10 [ 1153.557091][ T30] ? __pfx_lock_release+0x10/0x10 [ 1153.562215][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1153.607148][ T30] ? schedule+0x90/0x320 [ 1153.611476][ T30] schedule+0x14b/0x320 [ 1153.615686][ T30] schedule_preempt_disabled+0x13/0x30 [ 1153.693716][ T30] __mutex_lock+0x6a7/0xd70 [ 1153.712730][ T30] ? __mutex_lock+0x52a/0xd70 [ 1153.736063][ T30] ? new_device_store+0x1b4/0x890 [ 1153.755729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1153.767191][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1153.772308][ T30] new_device_store+0x1b4/0x890 [ 1153.791036][ T30] ? kernfs_fop_write_iter+0x1ea/0x500 [ 1153.805691][ T30] ? __pfx_new_device_store+0x10/0x10 [ 1153.811584][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 1153.816573][ T30] ? bus_attr_store+0x4f/0xa0 [ 1153.827063][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1153.832770][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 1153.848979][ T30] vfs_write+0xa6d/0xc90 [ 1153.853307][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1153.867701][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1153.872570][ T30] ? __fdget_pos+0x265/0x320 [ 1153.884824][ T30] ksys_write+0x1a0/0x2c0 [ 1153.890699][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1153.895625][ T30] ? do_syscall_64+0x100/0x230 [ 1153.911623][ T30] ? do_syscall_64+0xb6/0x230 [ 1153.916387][ T30] do_syscall_64+0xf3/0x230 [ 1153.929028][ T30] ? clear_bhb_loop+0x35/0x90 [ 1153.933789][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.947425][ T30] RIP: 0033:0x7f6f06d7c9df [ 1153.951913][ T30] RSP: 002b:00007f6f0705f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1153.969706][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6f06d7c9df [ 1153.985080][ T30] RDX: 0000000000000003 RSI: 00007f6f0705f270 RDI: 0000000000000005 [ 1153.994660][ T30] RBP: 00007f6f06df1c39 R08: 0000000000000000 R09: 00007f6f0705f077 [ 1154.011902][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1154.024102][ T30] R13: 00007f6f0705f270 R14: 00007f6f07a64620 R15: 0000000000000003 [ 1154.037050][ T30] [ 1154.041570][ T30] [ 1154.041570][ T30] Showing all locks held in the system: [ 1154.055647][ T30] 1 lock held by khungtaskd/30: [ 1154.063348][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1154.081723][ T30] 3 locks held by kworker/u8:2/35: [ 1154.086886][ T30] #0: ffff88814669e948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1154.107037][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1154.129455][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 1154.148258][ T30] 3 locks held by kworker/0:2/1167: [ 1154.156006][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1154.177079][ T30] #1: ffffc90004587d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1154.196816][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1154.209956][ T30] 2 locks held by dhcpcd/4893: [ 1154.214775][ T30] #0: ffff888028e4b6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 1154.234072][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 1154.244986][ T30] 2 locks held by getty/4982: [ 1154.258778][ T30] #0: ffff88814c5050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1154.277654][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1154.296715][ T30] 6 locks held by kworker/1:6/5271: [ 1154.302304][ T30] 3 locks held by kworker/0:6/5277: [ 1154.317348][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1154.338955][ T30] #1: ffffc90003ff7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1154.357596][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1154.376349][ T30] 4 locks held by kworker/u8:9/13749: [ 1154.385130][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1154.403776][ T30] #1: ffffc90003c5fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1154.418151][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1154.435239][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 1154.454934][ T30] 3 locks held by kworker/u8:10/13752: [ 1154.460831][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1154.484480][ T30] #1: ffffc90003c4fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1154.500250][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1154.521213][ T30] 3 locks held by kworker/u8:12/13759: [ 1154.526739][ T30] #0: ffff88814c126948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1154.547044][ T30] #1: ffffc90003befd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1154.571312][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1154.586122][ T30] 4 locks held by syz-executor/19025: [ 1154.595903][ T30] #0: ffff888031f2a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1154.610065][ T30] #1: ffff888047c27888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1154.627123][ T30] #2: ffff88802765be18 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1154.645572][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 1154.656451][ T30] 8 locks held by syz-executor/19048: [ 1154.667077][ T30] #0: ffff888031f2a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1154.676086][ T30] #1: ffff888047c24888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1154.696169][ T30] #2: ffff88802765bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1154.707268][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1154.728961][ T30] #4: ffff88806a70f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1154.747777][ T30] #5: ffff88806a70a250 (&devlink->lock_key#70){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1154.765376][ T30] #6: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1154.776306][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1154.797266][ T30] 1 lock held by syz.3.3135/19316: [ 1154.802442][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1154.824091][ T30] 1 lock held by syz.0.3138/19323: [ 1154.832601][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1154.851834][ T30] 1 lock held by syz.4.3139/19325: [ 1154.859686][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1154.875008][ T30] 2 locks held by syz-executor/19331: [ 1154.885696][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1154.903488][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1154.915954][ T30] 2 locks held by syz-executor/19334: [ 1154.927035][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1154.936550][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1154.958404][ T30] 2 locks held by syz-executor/19337: [ 1154.963835][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1154.982189][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1154.994665][ T30] 2 locks held by syz-executor/19353: [ 1155.006296][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.020155][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.040628][ T30] 2 locks held by syz-executor/19354: [ 1155.046064][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.061444][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.077035][ T30] 2 locks held by syz-executor/19361: [ 1155.082985][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.100420][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.115738][ T30] 2 locks held by syz-executor/19364: [ 1155.127588][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.147048][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.166708][ T30] 2 locks held by syz-executor/19366: [ 1155.172550][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.192101][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.210783][ T30] 2 locks held by syz-executor/19375: [ 1155.216209][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.232382][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.247521][ T30] 2 locks held by syz-executor/19376: [ 1155.253037][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.273260][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.285843][ T30] 2 locks held by syz-executor/19385: [ 1155.297330][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.316198][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.326822][ T30] 2 locks held by syz-executor/19387: [ 1155.337090][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.346694][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.366930][ T30] 2 locks held by syz-executor/19390: [ 1155.379825][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1155.397055][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1155.415913][ T30] [ 1155.420116][ T30] ============================================= [ 1155.420116][ T30] [ 1155.434915][ T30] NMI backtrace for cpu 0 [ 1155.439290][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1155.449478][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1155.459571][ T30] Call Trace: [ 1155.462895][ T30] [ 1155.465858][ T30] dump_stack_lvl+0x241/0x360 [ 1155.470584][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1155.475826][ T30] ? __pfx__printk+0x10/0x10 [ 1155.480468][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1155.485462][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1155.490969][ T30] ? _printk+0xd5/0x120 [ 1155.495168][ T30] ? __pfx__printk+0x10/0x10 [ 1155.499800][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1155.504701][ T30] ? __pfx__printk+0x10/0x10 [ 1155.509336][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1155.514417][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1155.520447][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1155.526482][ T30] watchdog+0xff4/0x1040 [ 1155.530771][ T30] ? watchdog+0x1ea/0x1040 [ 1155.535235][ T30] ? __pfx_watchdog+0x10/0x10 [ 1155.539956][ T30] kthread+0x2f0/0x390 [ 1155.544059][ T30] ? __pfx_watchdog+0x10/0x10 [ 1155.548866][ T30] ? __pfx_kthread+0x10/0x10 [ 1155.553498][ T30] ret_from_fork+0x4b/0x80 [ 1155.557969][ T30] ? __pfx_kthread+0x10/0x10 [ 1155.562603][ T30] ret_from_fork_asm+0x1a/0x30 [ 1155.567436][ T30] [ 1155.571285][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1155.576543][ C1] NMI backtrace for cpu 1 [ 1155.576559][ C1] CPU: 1 UID: 0 PID: 5271 Comm: kworker/1:6 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1155.576580][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1155.576593][ C1] Workqueue: events nsim_dev_trap_report_work [ 1155.576624][ C1] RIP: 0010:__lock_acquire+0x42f/0x2050 [ 1155.576658][ C1] Code: e8 03 48 89 44 24 58 0f b6 04 30 84 c0 48 89 7c 24 18 0f 85 90 13 00 00 31 c0 83 bc 24 e8 00 00 00 00 0f 95 c0 31 c9 83 3f 00 <0f> 95 c1 09 cb c1 e3 0d 44 09 c3 8b 4c 24 54 c1 e1 0f 0f b7 c9 09 [ 1155.576674][ C1] RSP: 0018:ffffc90000a18650 EFLAGS: 00000002 [ 1155.576690][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1155.576702][ C1] RDX: 0000000000000005 RSI: dffffc0000000000 RDI: ffff888063c6c6c4 [ 1155.576715][ C1] RBP: 0000000000000019 R08: 0000000000000001 R09: ffff888063c6c6e0 [ 1155.576728][ C1] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff888063c6bc00 [ 1155.576742][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff9a58a8a8 [ 1155.576754][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1155.576770][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1155.576783][ C1] CR2: 0000001b2e01dff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1155.576799][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000085 [ 1155.576811][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1155.576823][ C1] Call Trace: [ 1155.576830][ C1] [ 1155.576838][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1155.576866][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1155.576892][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1155.576925][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1155.576949][ C1] ? nmi_handle+0x14f/0x5a0 [ 1155.576966][ C1] ? nmi_handle+0x2a/0x5a0 [ 1155.576989][ C1] ? __lock_acquire+0x42f/0x2050 [ 1155.577016][ C1] ? default_do_nmi+0x63/0x160 [ 1155.577035][ C1] ? exc_nmi+0x123/0x1f0 [ 1155.577052][ C1] ? end_repeat_nmi+0xf/0x53 [ 1155.577080][ C1] ? __lock_acquire+0x42f/0x2050 [ 1155.577108][ C1] ? __lock_acquire+0x42f/0x2050 [ 1155.577136][ C1] ? __lock_acquire+0x42f/0x2050 [ 1155.577164][ C1] [ 1155.577172][ C1] [ 1155.577183][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 1155.577206][ C1] lock_acquire+0x1ed/0x550 [ 1155.577235][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 1155.577270][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1155.577303][ C1] ? __lock_acquire+0x1384/0x2050 [ 1155.577336][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 1155.577359][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 1155.577389][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1155.577414][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 1155.577431][ C1] debug_check_no_obj_freed+0x234/0x580 [ 1155.577462][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1155.577491][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1155.577514][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 1155.577531][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 1155.577548][ C1] kfree+0x11f/0x440 [ 1155.577571][ C1] ref_tracker_free+0x4ef/0x7e0 [ 1155.577589][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1155.577606][ C1] ? dst_destroy+0x171/0x460 [ 1155.577629][ C1] ? rcu_core+0xaaa/0x17a0 [ 1155.577653][ C1] ? handle_softirqs+0x2c5/0x980 [ 1155.577675][ C1] ? do_softirq+0x11b/0x1e0 [ 1155.577696][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 1155.577718][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1155.577742][ C1] ? process_scheduled_works+0xa63/0x1850 [ 1155.577766][ C1] ? worker_thread+0x870/0xd30 [ 1155.577789][ C1] ? kthread+0x2f0/0x390 [ 1155.577804][ C1] ? ret_from_fork+0x4b/0x80 [ 1155.577828][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1155.577856][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1155.577879][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 1155.577902][ C1] dst_destroy+0x171/0x460 [ 1155.577926][ C1] ? rcu_core+0xa37/0x17a0 [ 1155.577942][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1155.577966][ C1] rcu_core+0xaaa/0x17a0 [ 1155.577988][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1155.578017][ C1] handle_softirqs+0x2c5/0x980 [ 1155.578042][ C1] ? do_softirq+0x11b/0x1e0 [ 1155.578064][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1155.578090][ C1] do_softirq+0x11b/0x1e0 [ 1155.578112][ C1] [ 1155.578118][ C1] [ 1155.578124][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1155.578147][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1155.578174][ C1] ? rcu_is_watching+0x15/0xb0 [ 1155.578193][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1155.578234][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1155.578260][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1155.578284][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1155.578307][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1155.578335][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1155.578366][ C1] ? process_scheduled_works+0x976/0x1850 [ 1155.578390][ C1] process_scheduled_works+0xa63/0x1850 [ 1155.578425][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1155.578453][ C1] ? assign_work+0x364/0x3d0 [ 1155.578478][ C1] worker_thread+0x870/0xd30 [ 1155.578508][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1155.578535][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1155.578559][ C1] kthread+0x2f0/0x390 [ 1155.578575][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1155.578599][ C1] ? __pfx_kthread+0x10/0x10 [ 1155.578616][ C1] ret_from_fork+0x4b/0x80 [ 1155.578646][ C1] ? __pfx_kthread+0x10/0x10 [ 1155.578662][ C1] ret_from_fork_asm+0x1a/0x30 [ 1155.578693][ C1] [ 1156.146055][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1156.152983][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1156.163174][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1156.173270][ T30] Call Trace: [ 1156.176577][ T30] [ 1156.179536][ T30] dump_stack_lvl+0x241/0x360 [ 1156.184261][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1156.189509][ T30] ? __pfx__printk+0x10/0x10 [ 1156.194141][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1156.200184][ T30] ? vscnprintf+0x5d/0x90 [ 1156.204650][ T30] panic+0x349/0x880 [ 1156.208596][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1156.214807][ T30] ? __pfx_panic+0x10/0x10 [ 1156.219352][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1156.224765][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1156.230378][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1156.235876][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1156.242078][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1156.248286][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1156.254504][ T30] watchdog+0x1033/0x1040 [ 1156.258966][ T30] ? watchdog+0x1ea/0x1040 [ 1156.263436][ T30] ? __pfx_watchdog+0x10/0x10 [ 1156.268159][ T30] kthread+0x2f0/0x390 [ 1156.272263][ T30] ? __pfx_watchdog+0x10/0x10 [ 1156.276983][ T30] ? __pfx_kthread+0x10/0x10 [ 1156.281603][ T30] ret_from_fork+0x4b/0x80 [ 1156.286066][ T30] ? __pfx_kthread+0x10/0x10 [ 1156.290705][ T30] ret_from_fork_asm+0x1a/0x30 [ 1156.295543][ T30] [ 1156.298877][ T30] Kernel Offset: disabled [ 1156.303217][ T30] Rebooting in 86400 seconds..