last executing test programs: 13.402753946s ago: executing program 4 (id=411): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\x00\x00\x00\x00\x00u'], 0x0}, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x280, 0xa, 0x0, 0x0, 0x0, 0x180, 0x8, 0x0, {}, {0x8e}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11.398407843s ago: executing program 4 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002400000000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000018000480140003"], 0xcc}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000380)=""/36) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x2a) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) getdents64(r4, &(0x7f0000000040)=""/29, 0x1d) getdents64(r4, &(0x7f0000000140)=""/104, 0x68) io_uring_setup(0x1ff9, &(0x7f0000000040)={0x0, 0xbb0f, 0x200, 0x1, 0x21e}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)={r7}, &(0x7f00000006c0)=0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x84b, &(0x7f0000000000)=0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) 10.755007322s ago: executing program 3 (id=428): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bfa5, 0xa00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x400000000000000}, 0x0) 10.634576073s ago: executing program 3 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="08130100aaaaaaaaaa000000"], 0x64}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000458a85f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100003000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x24, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 8.915189456s ago: executing program 4 (id=436): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x20004c54}, 0xc094) 8.856285136s ago: executing program 3 (id=438): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_clone(0x10100000000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.631884318s ago: executing program 3 (id=440): syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1}}}}}}}]}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 7.934928638s ago: executing program 4 (id=441): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$mice(0xffffff9c, &(0x7f0000002300), 0x204000) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000002400)=""/97) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000fff5000071000040"]) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r9, 0xc018480d, &(0x7f0000000040)={0x3, 0x2, 0xa5a, 0x7fffffff, 0x0, 0x8}) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x140a118}}, 0x50) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) close(0x4) open(&(0x7f0000000000)='./file0\x00', 0x4102, 0x6) r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r11, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r12) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x0, @empty}, 0x1c) 7.545506259s ago: executing program 1 (id=443): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x4f78]}}) 7.395160797s ago: executing program 1 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xa00}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.388333007s ago: executing program 1 (id=445): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) syz_usb_connect$cdc_ecm(0x3, 0x78, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x6, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "a2"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0xc010, 0x1, 0xfbff, 0x3}, [@country_functional={0x8, 0x24, 0x7, 0x6, 0x4c2, [0x3]}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x81, 0x0, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffb, 0x1, 0xda05}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x40, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x1, 0x80, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0xb, 0x4}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8f, 0x7f, 0x7, 0x10, 0x88}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x430}}]}) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) recvmsg(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/82, 0x52}], 0x1}, 0x1) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r7, r6, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x80000) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00000002000000", 0x57}], 0x1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) 7.25488503s ago: executing program 0 (id=448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x102, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.23093858s ago: executing program 0 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="08130100aaaaaaaaaa000000"], 0x64}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000458a85f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100003000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x24, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 7.179674291s ago: executing program 3 (id=450): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711069000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711069000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) (async) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)) (async) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000100)) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) 6.956660153s ago: executing program 2 (id=451): syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x29, 0x1310c0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0xa, 0x0, 0x2, 0xffff7fff, 'syz1\x00', 0x3}, 0x3, 0x4, 0x7, 0x0, 0x3, 0x9, 'syz0\x00', &(0x7f0000000040)=['(-{\x00', '\x00', '&{#-\x00'], 0xa}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d"], 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x29, 0x1310c0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0xa, 0x0, 0x2, 0xffff7fff, 'syz1\x00', 0x3}, 0x3, 0x4, 0x7, 0x0, 0x3, 0x9, 'syz0\x00', &(0x7f0000000040)=['(-{\x00', '\x00', '&{#-\x00'], 0xa}) (async) 6.955143144s ago: executing program 4 (id=452): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) socket$igmp6(0xa, 0x3, 0x3a) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x40000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x242, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) rt_sigaction(0xa, &(0x7f0000000080)={&(0x7f0000000100)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000a5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000240)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x648000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47425247, 0x0, @stepwise}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xa, 0x2, 0x250, [0x0, 0x20000100, 0x0, 0x20000280], 0x0, 0x0, 0x0}, 0x2c8) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002100df4d000000000000000002"], 0x24}}, 0x0) 6.734881145s ago: executing program 0 (id=453): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000001700)={0x400, 0x300, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, {0x2, 0xa}, {0x7120, 0x7, 0x1}, {}, {}, 0x2000, 0x100, 0x0, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x2, 0x20, 0x0, 0x32f, 0x1, 0x1, 0x2, 0x3}) 6.650701963s ago: executing program 4 (id=454): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x3, &(0x7f00000003c0)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x10}}, 0xd4}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x100, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, 0x8) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = socket$rxrpc(0x21, 0x2, 0xa) read$snddsp(0xffffffffffffffff, 0x0, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x4, {0x2, 0x0, @loopback}}, 0x24) 6.3043657s ago: executing program 0 (id=456): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x20) write$binfmt_script(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x800, 0x2, 0xff, 0x3, 0x0, 0xb}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 5.275320287s ago: executing program 2 (id=457): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x147982, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x9020}, {r2, 0x400}, {r0, 0x400}], 0x3, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f00000001c0)={[0x4]}, 0x8) 4.746099459s ago: executing program 1 (id=458): unshare(0x28000600) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x50) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x8, 0x0, [{0xbb9, 0x0, 0xb}, {0x9d8, 0x0, 0x401}, {0xb15, 0x0, 0x5383}, {0x28d, 0x0, 0xc3}, {0xa98, 0x0, 0x4}, {0xa66, 0x0, 0xc2}, {0x88c, 0x0, 0x3}, {0x25e, 0x0, 0x8}]}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2, 0x10000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000000)={0x4}) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.663911253s ago: executing program 0 (id=459): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={r2}, 0x8) syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0xe4, 0xc8, 0xc3, 0x20, 0x1b3d, 0x156, 0x9404, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x84, 0x8, 0x20, 0xa, [{{0x9, 0x4, 0xae, 0x8, 0x0, 0x87, 0x7d, 0x7d, 0x1, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x3, 0x5, 0xd, "4831201cf4305b5c32"}]}, @generic={0x23, 0xd, "c3533799ef59508c254c8d31aca68cea15f7e84a53981dfdcf075d6d2e092164f7"}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41b}}, {0xe2, &(0x7f0000000200)=@string={0xe2, 0x3, "d36f47a7c2468cf179bf538cf8bc8fd6020b3869a4b1339cf120c65d3c9003443997be53182f9fa375d55bf820b036a452ed750db9d212531f709d07fe0f2eeb26bd59304e78e12be617cdf7f77d733b6be92fe60d1be517d73245861e7eef384f3903ed5cc93a999f8e03a26d7bf056b25491228190f8782f1e24a5c36500d500157b6d9bc1fffa360af6af1155ee32cfb8bb1f85137d5414d3133a1e21a70c86a4751c70871dbb8e3beb061d19f8f74110da92ba226a8c1316435ab60bd4c701a912741d27c5e4e501d02eae865c36f12b547077b2de2ea89e56bfb5ec7747"}}]}) 4.27798795s ago: executing program 3 (id=460): syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50243}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x5, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in=@multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x5, 0x6, 0x0, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0xa0}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x31ea8be7603078ea}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$FUSE(r3, &(0x7f0000002280)={0x2020}, 0x2020) 4.212146098s ago: executing program 2 (id=461): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x801) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x2c060000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = msgget$private(0x0, 0x8d) msgsnd(r3, 0x0, 0xc, 0x0) msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000000000009f1a01002de055e31b6fe032b89b86da6a8a8f5d3371947e2c26c067b468cf8aabb7edff56dae46addd51600d73fa34ebf785e3579cf9d783b0ab0836acc2ee09b3c78db1fff00dd22bb17fe6632dea37c9b7a926985276173f010a058b665"], 0x4c, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x156, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r7, 0x0) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.205879184s ago: executing program 1 (id=462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100, 0x600}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3.07464105s ago: executing program 1 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="08130100aaaaaaaaaa000000"], 0x64}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000458a85f500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100003000000000"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x24, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.466662783s ago: executing program 0 (id=464): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8008000380fe0f0500080000003e"], 0x44}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x408, @vifc_lcl_ifindex, @dev}, 0x10) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) 234.123303ms ago: executing program 2 (id=465): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1e0, 0x20, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x3}, {0x0, 0x3e000000, 0x8}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x2, 0x0, 0x2}) 96.436176ms ago: executing program 2 (id=466): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 2 (id=467): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50}, 0x50) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r1, &(0x7f00000070c0)="a37b33352102270e8080da9acea18541f7a5c5c0ccac6b823171247e6e3675eaeae3fc94bd43baf4a099da2138a0fe4c613d6f13f998b175ae52341675e866014f466758a4fbd32928f56991cfdb381074d418d9690e966a9e10945f0a16abc6e27418ba809e9e22294a5f0c2ddb090d6849df842893a2f38c00c4c3689ec3875d021a3e221aa99d35e4660aa1796c2d4ea85bb91752c0c21dd01debd31e5d1eb7ddc9c64388008fa08a9871b9d158d0adbff0f57a19252b75100a980d86e9633cd793c8e2e33c00035a5ad72ef11437dc82e6e04d1a48d1f771d58f2f7dd978e9a4f3d462f03c0ca11026a9a15d1bd5c732b90d56a18ed5e16e4fc18739bd31eb7695369af1178a495890fc9e796d43f2f461e6d45634fb8e191c06c7c875fbad054f0ab21fecd7d3883a5d568426335c8902a1ef2e5856cf8888b91050dd50dd9e419b9a77dd6a135dbe314d769929a2ab34679406dc4314763867f7ad19945c550cce8d9243b1f602a47a7ca863895e5ddaff09fb773b1862a3757b2895054754c2a23a4b7975391972a9ad4f25245265bd77b634b9d834a88e9a16cc1a5b1dae4a46de62b939fe89403110778f126786aadd81950077de037b83550b1b897ebe50a3f660eb368cd771abb9fe1cf6fdd51e987757e3e7a6d9d1eebdacb8ecc00de9413f19b2a4063ad78b8eff9b5c420a06e21364d8c9fab06ee878e1344c767fe6e8d21dfe2f4dece09e2fbf405bc1008b2d0adf86fc70421952207b2265bacf5179efe10ba4c42e1f4d8f7c5b19352b866afd280c66b50d87c08a7e316270189f01397b70fe7b50e7426a5a760bafae1cd0c28469ccce09dd37afffce3ca4d5e05569bc145dc4ee1107097cee103a2215d87af81474231a8113b1f2924e6d5bf29742c3ef17d4f284db167a74f742b768bc3becc027c76d30e7921350746ababd6172895de2cd9e3a5e764edc8e2f3588b45574cc574993e84a47bb3d71867f412a7b20b82ac23e10a85f5f1984d25e42793798547837509bd94a7c8579f9181341b221f418cc0de373672ada07951cc7009300dbd0742426aba9eb1d533a0cd14a6b13f37854922228b9d0b1e20b67746102f84973405884ee2519227d3254c96e1146e08956cb1a474434b2ffe7a0b09e9437b303159abe4eca69f444be28ffe95a3935ad77dcb7291da653f9942926f6a3c750526dca116e7c278c628244e4b6c2da0eb2255e067bb11c42c03105bcb4ab9eb7a276e1f5d8cf7e779c158a2cc7f867d0e7fc5d77d797d725efd76ffde2c69b1abfa05dac952cf3ca5295845202341956d484859f7d5e2b3df31f9e2152674ecd71590605310c8fe238e33c0415469826c35aed0d65f3aa459ccf607e4b25f25cd08d65b48bd0f56461d995007dc5b00d8d91a9fa48286fa1d8dfb68fc9756cf928c05ba7f93f8285f7b6df63a5634c39da5ab555362339fd85dae4e952e06b8ad17bcf157733d55a30a05c0b6ac2ed2fd54ab1033dec41101f5251ed40c6f42e876328bad8f4fd21730cd1e2efb847dcb93ded254c4e66c6374ec40b124d32032f5ee5c52f0a51f2ca797b12f814a1f79e3e4d69412dbc834d620e72ee9648d67ff53eb126f7d382fd8f827fab96b7427cd0962e84542a98acc79cf429f004ce86f5841d0256c83a96087671365e3799951087a017f0a3ff7900b25515869ee524de62bd4e7c2c68e1c900f38b0f7bac92606a0d0eadfa9f1d5af8157f0d5a0d49dedb00bf5785f8b2f8c2f8c10f150a30c31141ca0545eda71841523c6986d7d5fbc1918d5c79e40b929c180153d34fc7c7faba1d471c10b52d3e93b8192fa4826d43ff9df160ab83041b0f647398964c108b7875d74d592d8ee2d5420316656626e58b4dba72bb09376592a062ba0cfa94469b2102ce05b68fd3d275f0941851dd6399cf386cb900441f0f762540ab58c1800e7e00bb34fe32eddc14f05d1537f6c23c8f5b5039b6a22b7d843476d22d4a1086f65aaad2699d402113e349ba58168fe5f9ed496f56d5c7864f6225b24562acad3aa8aac2cfc02e6d14fdaf89066022f61c3f7c0581bee46817ef95500a83e4dd6e6bbfec9ae785b59f29c61e23735543dc8d2596b5a787c00de7dd4209a656b398967d74d022f5a4be5c2ad5aa8e6fa76ebed097822c6b438655c05a5b5b9a3fefb8996c03aab4ef804f2145a9cecd2cc6ad2a54f4f13153da513ff3ff707ba8f34836fd7be482663557cf6923b2c417486a3bae32c28f5f9af211a4f60f202eb4bc5b4a9ac0c72f080c5ce3cd563b40dba488c6bb96f27935c2296e72063399bc0835f194e52d72efe2b0122728d6f841545bebd45b3d589e011f3360e9f90029d06b708b078f6c437862fd355604e87bf37c1ddf3a802fda5bbf03f8453cdb335fb381be1be1d9d3816654102b27dcb78c9b743b4ad22681b6f44dc854c96324d8c2ca678f31d3fe60c5144649340ad541edbc7c1d66314b566b43eeb9a1d9970726d25e529bb0b011b563378ec4580961d1137d47942b02f6f6c0e5322e879711bd4a98348180ca243ae538bd18e9bc1c217b36049e3ffefcfcb3a514dbdbdac14c47afec06b161355e89d1db713a007841e9f53ddc44764b61002c35f48f1c8d57e3c67415cbc920c9e69fb8a0ad8b2da067dd37d9c883dc5c24aac8105987f7b43df3fa2aab926566abdbb506d08b1db4b9f6aff592e68878fd22b2a04ccf8fad887ab7307f5bb5678659467547bb9b8c75a8f19a2fcffd855d917cf126ea4af832adb30df51f6e7311e15bdf0b14a019b4c5dd2a58ff142dbe159039a6dc73c099a72927e717dfcb2c438b9058bf7411786d930db5077533f35f56d02a647f14575abc3f7a149411c4597e9e9bc7e1767da725d8ea13d5c3fbc6e33cfe00b323a0d3abb4a928b180fd2007284ac614163e087c9d996f5f7545691c9b86557b09bb62bbb93d68c51a1f27fb57b869ff5702ee36ad13983f77682f278e09d17ded110beae19ba0a0200c8f9cdc624ded25da0f31b79b21897b25413af89066259aa41291275918a42105f277f5d606b24ca82f254d04fcd258651c565ef918c21a2f9e78162aeab6f19cb0e7c9e8b60b3de04b0916cb726d595e957a74290417e626366f20a33c2be052b3cdbcccca7210b4c9a02c42b749dce61714f59b144a92ad9af3501a3ab02654e6ec897bfa385f95f4e481c6e937122b163d8cb9292ae59c80fd00502e6a726949633e4b1ee09df492daec19d6d498090a9659d2fb7b63349988ffac6c792ad427eec0f48b9b285feba6d2365f1dff4852ea6b4d2289df7ece3a509cfa3574bc8f9e2670c8433885d8c9ec0494d40808d9c9d4efbf90d1b6558ae75e254ea3aff6f37f976aa2916b58a015e4919760063ebd2373730a37bd0f91b281c05b6fb3e35924b4ac88a0d0a8b0d125551458c719cd53cf9753fafc9535d6af395a5b29408d915e7259ab0f6c7abd8c754bb71ed1a476e6760eee035460d4dfec3c53f91636280056a57fc45e0f37a47f994f8b1bc42644c37fb004aef34bbfa71ef5b89b1ee581b8c803885d8f8637a2b3ae49078738580aa8c0d94c2564dd7b50bd6b718b854755b6a08d8d1a2ccf4eb3c704e53b8a299617134aa79fd00c8749e57965e9a16d73142f2812c3e1ffc09938406561949c674c35cf88128de9152b4a43d4e2432ac234014c12dbf057112d28d3125fc98bf0dd9a934217440199a698628778649cd1360d79db2d74fa34e94a6a9333f2804b8e4264160c493e951294810e6708ea888a48403aac2b21e136a1d8d07fe07930b543028b62ee39eb6f3480c27186bdcfef55e93343496eefb0c38b50cf9762dc606ab7fa4d155d2d965746baad06c3d39ce8fe350cfbf569676195330ec78f25f04a915685684f49a19f4102109a2cf60f28df29fcf74892ff84110ffa18fd43d3f8a10173b970ed934f5e30d170ef6348890be263f0d64ad5ae53e6e6b4895f3cdcd6fdaebd69fa2f067bd2a207559ca6cbdcebd4e18855642ffd8d5b85b6b805c2ca1c63de1cafe7ee1f2ceedd8fd5c6e22ab40ad8772027576080609c6d55a7d08149122c1fc28497723751abe76c8dd12c6e2f311ad531b0a2f8e04a5f17346ba602dadae0745ebd715853277e1b73ed2d0be842a95c955be66c7ab52a736709177a8a48255655f23076f6f0a8bd683b1ccc7866830ef3780d499760464da1a5aa731aa16fbd925fba7fd06702046dcbc3571031a7f58e9d9604de217acd0b59f790e78ebc51d91a45ef57c37417c5c1f34127aabe64a269b90f56e03280f10bbd1500ab30a3ee29c59fa0598a57eee3641cbe002fbca5b12102a7b8e7fd514bde6bb742dd139ecec58a0ee60b2fde003be535523d024aba223ff8e6cbd44cab79cf379389a64b1ccb1c72dc3e7fbb8d1f59a39a80cf5d30f5a66546e838959f2e4f19e854c7de93c8ec06a8f223f5355e9c76e17ad28a887dadc17a41fe80d878cb3e3bb863bbaa168c9a4ebd74475d7e6ae3d99a7aad9e23d3edf08ecb5143764099d258d4a6d82fc9afa5775f75b41bf36be25a537f2905903f82e08657fb7e341079ff29a656ff85ae34317c5b1a81d8e814d55807fcf2ed7250b29046d2e1d0a14ec7ba8910abfe0cc9aa04164b94a4bb0970f3f3b1eac5cfd1f32a5ac84d552f60962e98222b2a9513af22d5da3f005f6f9ae166797a94360235eac2a6ddb2321c2ec514eb6ccf086a8c83e65081ea67acac44753302d4519d0cfc796f56c04e849cdea18cbd32da25dddbfc2cd575c67f26882b5c2bc534701f11775d8e93131488141fbb61c61755aa30c1a1829140f0332a76317aafa08f072f00cb330c5adfdca9d9055b1fb51616e8ca5dc34dadc6911d93b93871115107c2371279e248ff898268cccb12b07cc555ad7bf7811910f37f2b07598f661dfa1f2ff6fe2d1f8aa4deebf260573b27ef6e578469ad652a4f31da494fe0d00e4c66e8011d5bb2c889331679544514f16c257e74ddca134aaa5d15707c26b3373c110e2ec61fede15fc6e52428e1b5788f5c667794c5bbb26e8aa7a66cc38bdb6150c7804d59a2ce2c2d4120f94afb3807a2b685fdede4da11bc63abf04bf0823897dddee0697924fe855fba225a97c5b5d1bd6cb17d6b0ce93e475a9b14130ca5cee7ba41d521f72214b2f0fbcc1fbec70ef4dc7a4c9442d02ec641bd087ffe52fc7c9f0c39d41d03d1f93cbb8896abbee62f3bb1685f97e22664fb45530681eb6393442cfae1366ddc395fd5aa4d4fd0c250566b1c7cc8cfe6b25e73315998b45af5dbca10696ed8d113f4f35f385840f0558e93740e9a5d2e6768a022d17d266f47d050a8e91e8e0bdbf0d5e92f8d8294c3666c00344d4336d23a4c4235a3bcbd69f4b4769d6b1f513544392ccb2b96b1c6292131014835dfefebb4686496fee657e4aca53fbbdc15e0a72b1af7bd58bc6b4959356e7726342a330e6b9badc94e7498569f3cac949acc0ea9fc149a874fe271829c72e917f1374a80f22c8bf0109a0ac1e1de013a826173853127c22f7ba826bba044bcd8898e2c8432ce54a98ab4d18eac68c208e51a3210c6730b81384cfd8a74e681627805fb100c26a2a8385686fbffedfc7583b2222e1f79e45de79069b9f37a07bf99386525091b6d614820deea7e3105dcefa214258a8603c876fb776d0b019c984e028da494ef3f8841bc889bed54ea443634c2885639e865f0cd0a1dfd6f7a3b22c51461e73b3650b9a63c48b400bdcfac039e4cfdbefbf869386075ce8790eb4a588fd49f49c54ac5a8c45641bba62620d15042f08f5305566bc19111d08fedb65e2f87fb28442340be88a40cfef7ab3dad7e79225c07d347c2526269e9e709a90a49345d3351ac967da890707ed2affd155f2b356bbbe756872ecf7d944d8be128cd36100c8913f7fcf67f5d6f71ea19aa8877806bd6f65f10b2bf72867a7f6b900a7e0049aba25e162d670399e407c1332855a8d2db7465a40704660cd63bbcde4e36412c1fb244a1d23edbeb9d1c7189343144c8e27c55249a2b7fc00134a230601ca488d9ff441508b14129046e918abe163a40ae26b77c6df0fb843610a93279168fd7244cf934f905fe33dd5675819bbeaf370bf9a1101159c57dcfa4820a76cfa5957355ee450371df3c5f61fe3f4cef0df889b69f543b3965dc19d48d897272146db5c34c26bb6a7b305e9bc9a63419b789abd8e6a72a89d95a422d7e77f9c0afc619c43c3b77c8ffd408383fee4475ff88c90372bf9fda91b8b3b19ee9cac890cc6aa13f3a33d40f3970626b8854e72ecd65467e40552ceed496a5144db8f4122d34246bf76651fb1f1a154c7a3906939bd1fb85cf99cad9ecb0d63e0bb31b8133c2eb0e6f66e8e36746589c30637f5e045b9a5b6b5c728398c326aa9e0e670098726d3127b2479442c8e64ed5402790af0a114c42a07d97c38b7c738c9bcb3ddde8e67c3e786dddf7f9bac3cb61998f73340cdc62eeed7f05f2768fdaa6a5d91d98531a80fb8f8acb5abe47972f0155a85ee95166b20f727bd4ae648ce3e0de4d80ca7227ef298d4f204f094f12c8acfdd2a6905743b8daf56b8160dd081c54eeda647e23efdf89972aee301cc4f67faabe82fd9db1455090c05391cfc3e4bec5d38fab3716e19638dfd483ee2bba57e4d1c00d01cc45a49e2727c19b104f1072f1a50407e4622be580d35393c7db5119017be6bd5acf3be228c42096af9739e44867782e600a48ab9baeec9e37e9863d1b19733c3fe47c30f328816966748ce717529752ebb9e2f582ddd132158ed2d68fd17de3e725cd0fc13477585341703b51682879a9a3167cca4cb09ce2449d18514d8b8343de79b332b6981101a3c6ae2679aeaea1cad81d216400c40cea6ebc99ee77b5ab7a508cfffcefa7b4d48a2ea8a3ff5917f43876ea653822a21e208d733847e017eaadc460c9828365a1a0d149ccda8a5c42ecb74ce102fc9cb75360e87b758f7cb55c593bacf8a7eb698cf300adc7000f9082aff2be93ddbed0dc487c72e3e7707bbdaf0d6c5df66140270ca71de6c86b4776033af0cef6b5c8d9bb4bd74d2f90bdbc6d13fe4b4d5477a16add3eb75e865aa4441b68b3640bae1f03e7bb261808f2c3fb5d3997b666c7b5f0df5a53a7114f1eed925eb1d5519542f12e9692ed7ed98e789b962a892727bc06fafbc9e335e245e8240eaeb15ee7dd4136d738c243838fc752095763b7647760045fbdf26c2646c00ccee6fc905fa7224981e40a2124629c43cc020e2c0c83e02aca162afc40bc19734dd22fce44839440f4e69fd7aeb7c3f35ef2d4eddffc0874ef77bf4df5e1a77e2495e31cf514d4dd252ec978dc47df2edcbba9a175d4ecb402fb701f0781b618824328a94112ebdd51137910810c565d564a76be9d1e5d13ee9ad311fdcbdefe16bc6fbe0e3dfab238742a80463de1849bcdd6120ab7b420c9fb3c0e1955e65b431b0f43d32260ecdbdb69a4d6ea6498ac377648c974f29393f23cf99e2aa2cfe128c371beab86b0ec5b20edb5ee451554fac22562083396329d774fa9be0f4bee29f2657840bd82e1b824b371c56dac44a45d4898cb25a9af0598cc8b2f2b753fa88e4c3da1927a789cfcd6e95639e88d384d701d47bf74e0d4cfc4031ae57915ff179dfee312b2a7aefd50ca4f7e4deaa526703f80d5fd696e9043ed2b8110a3fad5188bf84d55ff73ba9ec6a8145e17369686e2a43b4e8bd4d09351f969432ea0c7940f326eda2cb8a7eb709480b3072af8fd3370ba8edcab2a6e48f8f6bc9679ed95de2a91955acfb2bdbec12ca8809922115edf86c68dc3d16c6dfd89c386976a8e666a9f2f965978f26a73919354eb0779d0c6220db4dceaf92686dc222b8af5472512f065767b63b8b64d370e2dd78a0398cb53a497b4c76863b82836e34aaf8bfe1e530be4622d350c16d20d973b7d6907e21efb393f3f7e57b6e0d660a8af0c689bb3e0d0c70d8a90878d650cf60f56012e80edcd1fad4bf5d7e9989a628ae3b20e755507ce52a9537bb57ba49f263f5905dd0e7c8be3e095b3738cfb9b040d4d81b7ac352bb213d2b47e8b6807b13990ecfcad12f2e0e1e486b5e34513c7f52d04edbd3296f5f5f5ed3d36463dccd417f05c38f156b4e8a78a07ce8536f83c80c8b1af747c83d9250cec54af6a67cc91e69f810d191da79f6640503d63b6172533bcacf5563caeb44c2b657e3039e063531ea22b07797f73218b14d77d94488bbba374202eec6c067ce3336da24893658225dfff4a8c6083954c4dcb9d969941937e8c19c2350da5453dc304ba5db942b33e1d062070478af3721528a77f518b67cff9d7a2e31669bb4e8d0dd6f179805b2e47d30cc1abb532576e8ed067cd0188df6c49ee0c63393bec3d925d88ecebe6a5a8f37f1dfc6762c7a3a596049e7f1787bec7a03e55a50360b83158e49cd9732a66b1cef83e43fd2abd33f753efdb236675490fc9c9381e6f421c9384e43ded79ce91025af90fda6752355ddacbb72aa204e7efa77f3825d7f274aca737bc56c61a1d05bf7004a71c904e8483f3c4df3c9ff5c7b7e350b4c55786d3ea99bb61814881c6e98da71e8f5a0646c44912d12e4a5ad3f2ea14f4d4933ecf7ac8b9464a80204b9c3465fc397aac5a3827bef7187fafb2074b22af3dcde7edaef478c75a0b50ea2ea20b2e08c35b6e48c424e2e3d5767e13dbbb1b87c6012f204f18ae7483d5c29c0a9c46de7917031e168c71c0a5c336c578f9ec41844618d40098542c772110566f1c6271d08842e8870a3ff1890a21b42a1339705edf23ff0b819e13c1fe061f950b86dac060e1654c388c53fa2ebf5988c5d06237b3424d551e5b103494f75bbea021b70aa5a67636f2b243819ce4abae74c4560bf15c9c33d095381e8fcbcf3d32abb2d38e78b9f5b97303fb46d01892258232849700be13dfc18c4f91d5a99c6a05970a6b4dc9179ea91eb4de76bbdf7be554d597d21adb396f0a1fa10fbc99741cc25aca370bfb916bf5bffda325c2405151e8e51426c90e5d782599cc59a7b263ff7a319d04d42835744f628c98e3ee379486f4954eab1742840edcf0fe87fd472f5e439678ac0bbc2295b2c12ea28680794c1c60978498b151c0ef5097480d453a0c22ddb2159316e04539561efbb55926758ae6fb2a3a495cf8aa7b693f1d854f99065e748b735097ea63e21d89515913e797515be6a767d42707ef6a0ebb1d3ff0071a0f4eddfdc85922a15a95f98d5f4a672d93621c975a3601bae013103c68fca1f6fb1c4b5853ffbece2075419263e32c72159268e3dab4ca3f0e5b904f40667bebf099374636d55f5a9ee1bbda48b39def3106041878afb63970cabae3388a33719ed206db73f10e498ff4bf4c0e3606726fc851578613c4bc1429695de29f6d6807eba84afc6ded50b0aa5b77ba864e1b36c035a97df5154b1a40017d919acdb8de617d458ddfe2ceda137bd1da6e2ebd5e32f2553c43e14ef6939ec0fb26a65487557cb1300072f79cbaf74a1221fad0d12added22303067f8292abd1d81e3d2aa200d1d1ed377bd57245ba44b51c927ae8d39e7d46dac00ecbacf30d32aebb568e757680c975dcc6864fafca28609db1ba8a30a74e96a791176f76a5de88c50b49ea20e206557b6e4f44d819b471fa1017cba5e195206de632bfb1b52c4c491bf4d1fbcde097324c7d42cf386f3a8c8410ef5477acbcdba183f0272e5ed5a142523b94899159361e7e48e10ee29e7d0a56e673ef903bcde86c19f71209daec067283c5453cce3dd4f39ac9ce17aa02c7ce6ac359a8d4396ed1aaff38225d41733d469535d5c6cd12b96265653296de79418d088652fef9e684f2f3e2ba4a63ab9ef9de81539e6061037e4efa9e03bcd1e95b2f5d6cacccc9f4e1df7c543befea4fa60513d84bdc84ae761be441116327ec263912cfbc47545546b8b038fe741d3ba495c7d862edba2733b497cef8b823a0198a928fce7f51575a93409c463bbf0aebe8450ad408974c6cf1de0e8ce887beee7fe06cae1c0f502799c1aa1a5942c74cd52497c342367b5850e03e9161f7766b4f3e3e5f9de3282f16be48e0eb8171f0cbda19d6c274f12cd62bc4c1bed7642bb147e9bcf7474f820f60d9020e2edf0c6bb3eb8d1dd53c85303544c0fc353cf0b16091d0bf238df89ed025d6591c5b32de30bf9e8e277a8f5f7a61f15051e38ece2021395dd9be6795ee0879a0bba9af3447973797e92279b3e74321615020a4624fbd9f6fa307a94c68f164942b9c7e0af63c41a7c76fac6d77e135ff5bfdaa3dd4753d0d8094c65f25811c9f593fc07f0710eca9e88c02645f9314d4674c50f869f5ed5246e41333670234412d8b6b2c9a99bf483af0cc0bc56039535e6cd9be1b5801538b39f83ec9fc4bb78a8880c06d27d8838e551a7c5eee3c85421665ca2bff57c21dd37e55939ee9f7e06cfcfc18a41b261422d7f94f1ee692960ba2a81a70c167d9e477d2b4a489dd08b1851dc79d651b468c179bc3e2c32215fa74ee00d449735094ee3a6c819decf11728cea207d41d3c665d210e1ab26a79fbbfba8aed8b401227a1adae500333a29d88086f796757dc12af76888c857407a21d9ed483651003f3298bbdb23f27e3e3e5f99f0dfb64534dd1676403042c62966fc7a3da65a089726ed48fd522b92ca292d0139b424fb6e2fa2b81cc5f95d0d64846d2060ad32edb8fe52eaa06b063512ae25c08664e65c5331dd17abf062a78bab8993766893d1cc04850015013a2f461fd96572496020145dc8fdb6f7393b0b1a380296f3cd8d50dcaa54d5259b0e6bc2da29edd01f9419806149c471d97f9f78f8be7236c7d6ec62885854a95ad81f3f7a2fe7968b446e655e1318d118bf731758a75a9747b6e15e945de3c05f962df9975d4268feea8e5de68fdf385636c66670cf195b7455b8d0b69eef633dc7ac799c451b000413efdcd62701eeaa7de5ecfe21c60aea75e22104f9a8ab443141dc18a61914a5c89336ec08ebe7454e4a5568b7fcd1ef25bdca18d3a6c10879564907742588d2b08d1e946712584acab70b3015cf91bfe1e88e8340b6d1b3f801a9fee09ade3f5989f6738401b56e117c36a9feb7809561f01ac1f360edaa29873a0e4daef2df8e97a483995f0ac114d324672c354a52ad8507b6d9c7ab8a3643fc8b46cc357c8eb396d6dba21b99611ef16139fe123f60c84ff1848dd74a8f32682293b2f5e5d496a8b88bee8990287400f4fa4420492bc85a0422ce9179a0cb7aead52f937c985da74c772538e2c5f3cfb88dda634635d0e797d52f5e3f250587f1b1817a9ea2d44cc2a40819c4f8f12d20a95c999e4b911a261fc4d179c3cec165d4737b72acef9e5f302cc90aec7f21e95c3d4f1df4ab39ff06e6baf9b8da3475e6f9cf9754f7ceabc3fa4e61c374fef8df2826aa4cca6703959b4d82224a3e02c68b4c53e9d850164c98f74bd4d2eff235329a1e72f144d1977780f3ad70162788b5fcb57277665bf136261710260277b4a8b68a067bdfa1d5c5f1d5ea42d45e1b5031b9824f3e23", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x0, {0x0, 0x4}}}) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f0000000300)={0x0, 0x88a0, 0x0, 0x1, 0xe4, 0x0, r3}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) kernel console output (not intermixed with test programs): [ T3706] team0 (unregistering): Port device team_slave_1 removed [ 158.978981][ T5284] usb 1-1: device descriptor read/8, error -71 [ 158.989361][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 159.060432][ T5240] Bluetooth: hci0: command tx timeout [ 159.104726][ T5284] usb usb1-port1: unable to enumerate USB device [ 159.470718][ T7195] chnl_net:caif_netlink_parms(): no params data found [ 159.490143][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.540290][ T7017] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.579867][ T7207] chnl_net:caif_netlink_parms(): no params data found [ 159.663779][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.671022][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.694434][ T5240] Bluetooth: hci3: command tx timeout [ 159.825529][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.832698][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.935700][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.942857][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.964536][ T7207] bridge_slave_0: entered allmulticast mode [ 159.971582][ T7207] bridge_slave_0: entered promiscuous mode [ 159.996838][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.004042][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.024838][ T7207] bridge_slave_1: entered allmulticast mode [ 160.031902][ T7207] bridge_slave_1: entered promiscuous mode [ 160.128235][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.141331][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.149718][ T7195] bridge_slave_0: entered allmulticast mode [ 160.162781][ T7195] bridge_slave_0: entered promiscuous mode [ 160.172089][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.182650][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.185610][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.190305][ T7195] bridge_slave_1: entered allmulticast mode [ 160.206220][ T7195] bridge_slave_1: entered promiscuous mode [ 160.207000][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.223033][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.233120][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.243818][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.251348][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.269556][ T7207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.287265][ T7207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.320658][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.409179][ T3706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.458772][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.523556][ T7260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.543811][ T7207] team0: Port device team_slave_0 added [ 160.566537][ T3706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.601743][ T7195] team0: Port device team_slave_0 added [ 160.613093][ T7195] team0: Port device team_slave_1 added [ 160.629495][ T7207] team0: Port device team_slave_1 added [ 160.662382][ T3706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.708228][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.715671][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.754664][ T7207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.773651][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.791080][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.819739][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.862287][ T3706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.888219][ T7207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.904326][ T7207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.931975][ T7207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.954181][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.968035][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.994779][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.121043][ T7207] hsr_slave_0: entered promiscuous mode [ 161.134521][ T54] Bluetooth: hci0: command tx timeout [ 161.141063][ T7207] hsr_slave_1: entered promiscuous mode [ 161.191896][ T7195] hsr_slave_0: entered promiscuous mode [ 161.199943][ T7195] hsr_slave_1: entered promiscuous mode [ 161.206387][ T7195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.214025][ T7195] Cannot create hsr debugfs directory [ 161.306633][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.474631][ T5660] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 161.479285][ T3706] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.635254][ T5660] usb 1-1: Using ep0 maxpacket: 8 [ 161.642564][ T5660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 161.644368][ T3706] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.664602][ T5660] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 161.688888][ T5660] usb 1-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 161.709328][ T5660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.724674][ T5660] usb 1-1: Product: syz [ 161.734592][ T5660] usb 1-1: Manufacturer: syz [ 161.742431][ T5660] usb 1-1: SerialNumber: syz [ 161.751792][ T5660] usb 1-1: config 0 descriptor?? [ 161.777019][ T54] Bluetooth: hci3: command tx timeout [ 161.894726][ T3706] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.005664][ T5660] usb 1-1: USB disconnect, device number 20 [ 162.042537][ T5479] udevd[5479]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.113273][ T3706] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.253991][ T7017] veth0_vlan: entered promiscuous mode [ 162.263393][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 162.329642][ T7017] veth1_vlan: entered promiscuous mode [ 162.345023][ T54] Bluetooth: hci1: command tx timeout [ 162.406945][ T7017] veth0_macvtap: entered promiscuous mode [ 162.467740][ T7017] veth1_macvtap: entered promiscuous mode [ 162.622501][ T3706] bridge_slave_1: left allmulticast mode [ 162.633658][ T3706] bridge_slave_1: left promiscuous mode [ 162.639883][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.659933][ T3706] bridge_slave_0: left allmulticast mode [ 162.666002][ T3706] bridge_slave_0: left promiscuous mode [ 162.671856][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.690152][ T3706] bridge_slave_1: left allmulticast mode [ 162.696372][ T3706] bridge_slave_1: left promiscuous mode [ 162.702091][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.719015][ T3706] bridge_slave_0: left allmulticast mode [ 162.730512][ T3706] bridge_slave_0: left promiscuous mode [ 162.739803][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.219829][ T54] Bluetooth: hci0: command tx timeout [ 163.564062][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.578050][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.593410][ T3706] bond0 (unregistering): Released all slaves [ 163.710576][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.721729][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.737494][ T3706] bond0 (unregistering): Released all slaves [ 163.762350][ T7319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.335'. [ 163.779236][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.817382][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.825070][ T7255] bridge_slave_0: entered allmulticast mode [ 163.832108][ T7255] bridge_slave_0: entered promiscuous mode [ 163.840086][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.847304][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.854671][ T7255] bridge_slave_1: entered allmulticast mode [ 163.861770][ T7255] bridge_slave_1: entered promiscuous mode [ 163.864670][ T54] Bluetooth: hci3: command tx timeout [ 163.981933][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.994089][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.065312][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.078320][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.091088][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.111303][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.123684][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.142515][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.163859][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.290983][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.314046][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.339511][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.350479][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.360828][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.372448][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.383932][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.397835][ T7017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.416593][ T54] Bluetooth: hci1: command tx timeout [ 164.434501][ T7017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.443256][ T7017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.452473][ T7017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.479751][ T7255] team0: Port device team_slave_0 added [ 164.490385][ T7255] team0: Port device team_slave_1 added [ 164.683203][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.709974][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.755813][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.776393][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.783377][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.805008][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.818136][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.818824][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.838094][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.848061][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.856899][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.864536][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.063849][ T3706] hsr_slave_0: left promiscuous mode [ 165.069992][ T3706] hsr_slave_1: left promiscuous mode [ 165.078228][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.086312][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.094068][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.102056][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.114306][ T3706] hsr_slave_0: left promiscuous mode [ 165.123018][ T3706] hsr_slave_1: left promiscuous mode [ 165.129079][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.136865][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.145084][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.152520][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.177533][ T3706] veth1_macvtap: left promiscuous mode [ 165.183075][ T3706] veth0_macvtap: left promiscuous mode [ 165.188799][ T3706] veth1_vlan: left promiscuous mode [ 165.194071][ T3706] veth0_vlan: left promiscuous mode [ 165.200721][ T3706] veth1_macvtap: left promiscuous mode [ 165.206502][ T3706] veth0_macvtap: left promiscuous mode [ 165.212217][ T3706] veth1_vlan: left promiscuous mode [ 165.217599][ T3706] veth0_vlan: left promiscuous mode [ 165.296961][ T54] Bluetooth: hci0: command tx timeout [ 165.639566][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 165.678590][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 165.934553][ T54] Bluetooth: hci3: command tx timeout [ 166.328987][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 166.369405][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 166.496783][ T54] Bluetooth: hci1: command tx timeout [ 166.743492][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.771602][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.785699][ T7255] hsr_slave_0: entered promiscuous mode [ 166.792125][ T7255] hsr_slave_1: entered promiscuous mode [ 166.798368][ T7255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.806140][ T7255] Cannot create hsr debugfs directory [ 166.859321][ T7207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.894740][ T54] Bluetooth: hci2: command tx timeout [ 166.918296][ T7207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.954451][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.962308][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.990867][ T7195] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.012651][ T7207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.023132][ T7207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.064363][ T7195] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.087429][ T7195] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.121937][ T7195] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.136162][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 167.422771][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.432657][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.440479][ T7371] bridge_slave_0: entered allmulticast mode [ 167.448424][ T7371] bridge_slave_0: entered promiscuous mode [ 167.457024][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.464929][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.472151][ T7371] bridge_slave_1: entered allmulticast mode [ 167.483449][ T7371] bridge_slave_1: entered promiscuous mode [ 167.530670][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.551621][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.610038][ T7371] team0: Port device team_slave_0 added [ 167.635814][ T7371] team0: Port device team_slave_1 added [ 167.675470][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.682456][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.709610][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.732633][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.741016][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.790875][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.822644][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.887114][ T3706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.984148][ T3706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.007185][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.057799][ T7371] hsr_slave_0: entered promiscuous mode [ 168.069778][ T7371] hsr_slave_1: entered promiscuous mode [ 168.080164][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.093027][ T7371] Cannot create hsr debugfs directory [ 168.109402][ T7207] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.126918][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.161323][ T3706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.244909][ T3706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.269675][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.276809][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.287234][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.294371][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.339993][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.347178][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.381943][ T7255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.391817][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.398970][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.437794][ T7255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.448981][ T7255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.475053][ T7255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.566448][ T3706] bridge_slave_1: left allmulticast mode [ 168.572141][ T3706] bridge_slave_1: left promiscuous mode [ 168.577850][ T54] Bluetooth: hci1: command tx timeout [ 168.588088][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.599736][ T3706] bridge_slave_0: left allmulticast mode [ 168.605913][ T3706] bridge_slave_0: left promiscuous mode [ 168.611987][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.913708][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.926727][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.937408][ T3706] bond0 (unregistering): Released all slaves [ 168.975499][ T54] Bluetooth: hci2: command tx timeout [ 169.040488][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.222880][ T7207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.292766][ T7195] veth0_vlan: entered promiscuous mode [ 169.348152][ T7195] veth1_vlan: entered promiscuous mode [ 169.374602][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.374692][ T7376] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 169.396688][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.422677][ T7376] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 169.530320][ T7195] veth0_macvtap: entered promiscuous mode [ 169.549220][ T7207] veth0_vlan: entered promiscuous mode [ 169.560356][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.582576][ T7195] veth1_macvtap: entered promiscuous mode [ 169.592008][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.599182][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.617036][ T7371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.638956][ T7371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.653509][ T7371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.663144][ T7207] veth1_vlan: entered promiscuous mode [ 169.676484][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.687309][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.703629][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.715039][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.726057][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.738773][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.746013][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.756186][ T7371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.780446][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.791381][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.803379][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.814736][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.826007][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.850139][ T7195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.859862][ T7195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.868941][ T7195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.877857][ T7195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.920244][ T7207] veth0_macvtap: entered promiscuous mode [ 169.954572][ T7207] veth1_macvtap: entered promiscuous mode [ 169.997602][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.011303][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.029300][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.040419][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.050552][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.061071][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.073002][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.111227][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.123156][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.133502][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.146448][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.156322][ T7207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.167047][ T7207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.180283][ T7207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.208393][ T7207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.218113][ T7207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.227337][ T7207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.236906][ T7207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.241730][ T7376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.252676][ T7376] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 170.270420][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.283068][ T7376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.303425][ T7376] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 170.323400][ T7376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.330614][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.334505][ T7376] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 170.354976][ T7376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.368569][ T7376] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 170.390988][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.454071][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.461205][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.513934][ T7255] veth0_vlan: entered promiscuous mode [ 170.561371][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.568699][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.660965][ T7255] veth1_vlan: entered promiscuous mode [ 170.672504][ T3706] hsr_slave_0: left promiscuous mode [ 170.681080][ T3706] hsr_slave_1: left promiscuous mode [ 170.688279][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.697028][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.715183][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.723947][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.764023][ T3706] veth1_macvtap: left promiscuous mode [ 170.777331][ T3706] veth0_macvtap: left promiscuous mode [ 170.782922][ T3706] veth1_vlan: left promiscuous mode [ 170.790557][ T3706] veth0_vlan: left promiscuous mode [ 170.888961][ T29] audit: type=1800 audit(1728013696.241:9): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.341" name="/" dev="fuse" ino=1 res=0 errno=0 [ 171.219343][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 171.257277][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 171.630541][ T7371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.653673][ T7371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.667689][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.685107][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.714031][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.729470][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.762978][ T7255] veth0_macvtap: entered promiscuous mode [ 171.789495][ T7255] veth1_macvtap: entered promiscuous mode [ 171.802034][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.840717][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.865127][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.921928][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.948560][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.964532][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.984363][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.004479][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.024304][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.035805][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.067581][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.078404][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.088609][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.099734][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.109705][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.120251][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.135985][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.216195][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.224082][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.361280][ T7371] veth0_vlan: entered promiscuous mode [ 172.403624][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.415912][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.423921][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.433033][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.436794][ T7371] veth1_vlan: entered promiscuous mode [ 172.458236][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.473255][ T5289] IPVS: starting estimator thread 0... [ 172.473344][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.510676][ T7425] usb usb9: usbfs: process 7425 (syz.2.325) did not claim interface 0 before use [ 172.548456][ T7255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.566283][ T7425] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 172.574975][ T7255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.583997][ T7255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.603894][ T7255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.635499][ T7430] IPVS: using max 22 ests per chain, 52800 per kthread [ 172.691827][ T7371] veth0_macvtap: entered promiscuous mode [ 172.734115][ T7371] veth1_macvtap: entered promiscuous mode [ 172.920282][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.950076][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.994569][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.014948][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.030274][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.048144][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.066145][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.082953][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.132425][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.283686][ T3706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.311940][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 173.335677][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.352385][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.363076][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.383904][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.400671][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.412220][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.422729][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.433211][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.445590][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.495591][ T3706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.537329][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.541533][ T7371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.562718][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.563154][ T7371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.580316][ T7371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.589221][ T7371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.632941][ T3706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.695344][ T5289] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 173.706198][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.717511][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.726491][ T7432] bridge_slave_0: entered allmulticast mode [ 173.733176][ T7432] bridge_slave_0: entered promiscuous mode [ 173.764924][ T3706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.796810][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.804039][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.812939][ T7432] bridge_slave_1: entered allmulticast mode [ 173.820512][ T7432] bridge_slave_1: entered promiscuous mode [ 173.855077][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 173.868918][ T5289] usb 2-1: no configurations [ 173.875738][ T5289] usb 2-1: can't read configurations, error -22 [ 173.882620][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.895205][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.955142][ T7432] team0: Port device team_slave_0 added [ 173.975779][ T7432] team0: Port device team_slave_1 added [ 174.021538][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.034614][ T5289] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.049275][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.076385][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.094800][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.101795][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.132238][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.145189][ T3706] bridge_slave_1: left allmulticast mode [ 174.150862][ T3706] bridge_slave_1: left promiscuous mode [ 174.157565][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.166522][ T3706] bridge_slave_0: left allmulticast mode [ 174.172251][ T3706] bridge_slave_0: left promiscuous mode [ 174.179317][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.204514][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 174.210503][ T5289] usb 2-1: no configurations [ 174.215332][ T5289] usb 2-1: can't read configurations, error -22 [ 174.234512][ T5289] usb usb2-port1: attempt power cycle [ 174.502711][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.514721][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.526592][ T3706] bond0 (unregistering): Released all slaves [ 174.571575][ T7432] hsr_slave_0: entered promiscuous mode [ 174.580402][ T7432] hsr_slave_1: entered promiscuous mode [ 174.586340][ T5240] Bluetooth: hci4: command tx timeout [ 174.594821][ T5289] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 174.616979][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.628552][ T7432] Cannot create hsr debugfs directory [ 174.634399][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 174.640526][ T5289] usb 2-1: no configurations [ 174.661957][ T5289] usb 2-1: can't read configurations, error -22 [ 174.825084][ T5289] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 174.858825][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 174.870548][ T5289] usb 2-1: no configurations [ 174.877758][ T5289] usb 2-1: can't read configurations, error -22 [ 174.884789][ T5289] usb usb2-port1: unable to enumerate USB device [ 175.855512][ T7450] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 175.861682][ T7450] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 175.899830][ T7432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.948378][ T7432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.071684][ T7432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.121420][ T7432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.196574][ T3706] hsr_slave_0: left promiscuous mode [ 176.214585][ T3706] hsr_slave_1: left promiscuous mode [ 176.233777][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.265134][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.281242][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.293223][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.382263][ T3706] veth1_macvtap: left promiscuous mode [ 176.394880][ T5285] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 176.402849][ T3706] veth0_macvtap: left promiscuous mode [ 176.410530][ T3706] veth1_vlan: left promiscuous mode [ 176.417318][ T3706] veth0_vlan: left promiscuous mode [ 176.556230][ T5285] usb 2-1: device descriptor read/64, error -71 [ 176.708620][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.717931][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.728127][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.738967][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.746677][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.754034][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.805212][ T5285] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 176.968898][ T5285] usb 2-1: device descriptor read/64, error -71 [ 177.099599][ T5285] usb usb2-port1: attempt power cycle [ 177.172442][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 177.221393][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 177.446722][ T5285] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 177.490801][ T5285] usb 2-1: device descriptor read/8, error -71 [ 177.700136][ T2919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.715099][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 177.720131][ T2919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.730421][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 177.741848][ T5285] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 177.765067][ T5285] usb 2-1: device descriptor read/8, error -71 [ 177.859511][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.871064][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.875657][ T5285] usb usb2-port1: unable to enumerate USB device [ 178.094954][ T5289] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.101825][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.201064][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.220586][ T7480] chnl_net:caif_netlink_parms(): no params data found [ 178.234801][ T5289] usb 3-1: device descriptor read/64, error -71 [ 178.246565][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.253818][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.281827][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.289074][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.488703][ T3706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.503803][ T5289] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.576600][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.583725][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.601753][ T7480] bridge_slave_0: entered allmulticast mode [ 178.617001][ T7480] bridge_slave_0: entered promiscuous mode [ 178.646243][ T3706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.660685][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.668151][ T5289] usb 3-1: device descriptor read/64, error -71 [ 178.674823][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.682063][ T7480] bridge_slave_1: entered allmulticast mode [ 178.689325][ T7480] bridge_slave_1: entered promiscuous mode [ 178.730591][ T3706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.752206][ T7480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.770481][ T7480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.790448][ T5289] usb usb3-port1: attempt power cycle [ 178.798921][ T3706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.815437][ T5240] Bluetooth: hci1: command tx timeout [ 178.841180][ T7480] team0: Port device team_slave_0 added [ 178.855218][ T5271] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 178.867030][ T7480] team0: Port device team_slave_1 added [ 178.901129][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.909252][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.935272][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.946852][ T7480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.963186][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.973090][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.999184][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.009388][ T7480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.024521][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 179.044707][ T5271] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 179.053709][ T5271] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 179.063577][ T5271] usb 1-1: config 0 has no interface number 0 [ 179.071446][ T5271] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.084240][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.090813][ T5271] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.103683][ T5271] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.129469][ T5271] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 179.137047][ T5289] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.152337][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 179.164955][ T7480] hsr_slave_0: entered promiscuous mode [ 179.171422][ T5271] usb 1-1: Product: syz [ 179.175232][ T5289] usb 3-1: device descriptor read/8, error -71 [ 179.179282][ T5271] usb 1-1: config 0 descriptor?? [ 179.189494][ T7480] hsr_slave_1: entered promiscuous mode [ 179.198589][ T7480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.225951][ T7480] Cannot create hsr debugfs directory [ 179.302432][ T3706] bridge_slave_1: left allmulticast mode [ 179.312267][ T3706] bridge_slave_1: left promiscuous mode [ 179.322810][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.341781][ T3706] bridge_slave_0: left allmulticast mode [ 179.349899][ T3706] bridge_slave_0: left promiscuous mode [ 179.360806][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.425747][ T5289] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.447266][ T5289] usb 3-1: device descriptor read/8, error -71 [ 179.568451][ T5289] usb usb3-port1: unable to enumerate USB device [ 179.597146][ T5285] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 179.765300][ T5285] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 179.797464][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.806662][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.824964][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.840778][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.851617][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.870076][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.877533][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.890351][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.900195][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.908860][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.923208][ T3706] bond0 (unregistering): Released all slaves [ 179.930836][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.943510][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.952709][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.953257][ T7513] syz.0.353 (7513): attempted to duplicate a private mapping with mremap. This is not supported. [ 179.965082][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 179.990375][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.999690][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.032550][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.061943][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.083492][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.144082][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.152314][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.170711][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.197707][ T7432] veth0_vlan: entered promiscuous mode [ 180.205529][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.219135][ T5285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.219721][ T5271] usb 1-1: USB disconnect, device number 21 [ 180.228119][ T5285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.250925][ T5285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.261068][ T5285] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.296046][ T5285] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.314410][ T5285] usb 2-1: Product: syz [ 180.319506][ T5285] usb 2-1: Manufacturer: syz [ 180.331676][ T5285] usb 2-1: SerialNumber: syz [ 180.347217][ T7432] veth1_vlan: entered promiscuous mode [ 180.365469][ T5285] usb 2-1: config 0 descriptor?? [ 180.381650][ T5285] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 180.517512][ T3706] hsr_slave_0: left promiscuous mode [ 180.523969][ T3706] hsr_slave_1: left promiscuous mode [ 180.540862][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.552133][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.569447][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.594420][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.636626][ T3706] veth1_macvtap: left promiscuous mode [ 180.642359][ T3706] veth0_macvtap: left promiscuous mode [ 180.655348][ T3706] veth1_vlan: left promiscuous mode [ 180.660710][ T3706] veth0_vlan: left promiscuous mode [ 180.673840][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 180.684415][ T5285] usb 2-1: USB disconnect, device number 22 [ 180.697384][ T5285] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 180.903935][ T5240] Bluetooth: hci1: command tx timeout [ 180.964156][ T29] audit: type=1326 audit(1728013706.311:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 180.986271][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.041713][ T29] audit: type=1326 audit(1728013706.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041761][ T29] audit: type=1326 audit(1728013706.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041791][ T29] audit: type=1326 audit(1728013706.311:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041830][ T29] audit: type=1326 audit(1728013706.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041862][ T29] audit: type=1326 audit(1728013706.311:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041894][ T29] audit: type=1326 audit(1728013706.311:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041926][ T29] audit: type=1326 audit(1728013706.311:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041957][ T29] audit: type=1326 audit(1728013706.311:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.041990][ T29] audit: type=1326 audit(1728013706.311:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3a49b7dff9 code=0x7ffc0000 [ 181.079281][ T7539] sock: sock_set_timeout: `syz.2.357' (pid 7539) tries to set negative timeout [ 181.154896][ T5282] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 181.168728][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.367494][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 181.476151][ T5282] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 181.487013][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.506906][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.525220][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.533116][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.542497][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 181.556530][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.567787][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.578881][ T7543] FAULT_INJECTION: forcing a failure. [ 181.578881][ T7543] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 181.579409][ T9] usb 1-1: config 0 has an invalid interface number: 28 but max is 12 [ 181.601222][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 181.609670][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.2.359 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 181.610584][ T9] usb 1-1: config 0 has no interface number 0 [ 181.620886][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.620912][ T7543] Call Trace: [ 181.620921][ T7543] [ 181.627020][ T9] usb 1-1: too many endpoints for config 0 interface 28 altsetting 194: 120, using maximum allowed: 30 [ 181.637030][ T7543] dump_stack_lvl+0x241/0x360 [ 181.637063][ T7543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.637081][ T7543] ? __pfx__printk+0x10/0x10 [ 181.637110][ T7543] ? snprintf+0xda/0x120 [ 181.640444][ T9] usb 1-1: config 0 interface 28 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 181.643290][ T7543] should_fail_ex+0x3b0/0x4e0 [ 181.654412][ T9] usb 1-1: config 0 interface 28 has no altsetting 0 [ 181.659027][ T7543] _copy_to_user+0x2f/0xb0 [ 181.664488][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.668775][ T7543] simple_read_from_buffer+0xca/0x150 [ 181.668812][ T7543] proc_fail_nth_read+0x1e9/0x250 [ 181.668837][ T7543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.668867][ T7543] ? rw_verify_area+0x55e/0x6f0 [ 181.673199][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.686351][ T7543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.686388][ T7543] vfs_read+0x201/0xbc0 [ 181.686415][ T7543] ? __pfx_lock_release+0x10/0x10 [ 181.692426][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.697743][ T7543] ? __pfx_vfs_read+0x10/0x10 [ 181.697780][ T7543] ? __fget_files+0x3f3/0x470 [ 181.697808][ T7543] ? fdget_pos+0x24e/0x320 [ 181.697829][ T7543] ksys_read+0x183/0x2b0 [ 181.697849][ T7543] ? __pfx_ksys_read+0x10/0x10 [ 181.697867][ T7543] ? do_syscall_64+0x100/0x230 [ 181.697895][ T7543] ? do_syscall_64+0xb6/0x230 [ 181.697916][ T7543] do_syscall_64+0xf3/0x230 [ 181.697935][ T7543] ? clear_bhb_loop+0x35/0x90 [ 181.697957][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.697991][ T7543] RIP: 0033:0x7f4dfed7ca3c [ 181.706010][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 181.711227][ T7543] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 181.711256][ T7543] RSP: 002b:00007f4dffb28030 EFLAGS: 00000246 [ 181.716909][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.721608][ T7543] ORIG_RAX: 0000000000000000 [ 181.731590][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.731967][ T7543] RAX: ffffffffffffffda RBX: 00007f4dfef35f80 RCX: 00007f4dfed7ca3c [ 181.743993][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.748316][ T7543] RDX: 000000000000000f RSI: 00007f4dffb280a0 RDI: 0000000000000005 [ 181.748333][ T7543] RBP: 00007f4dffb28090 R08: 0000000000000000 R09: 0000000000000000 [ 181.748345][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.748357][ T7543] R13: 0000000000000000 R14: 00007f4dfef35f80 R15: 00007f4dff05fa28 [ 181.752598][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.757597][ T7543] [ 181.757709][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.764192][ T9] usb 1-1: Product: syz [ 181.955435][ T9] usb 1-1: Manufacturer: syz [ 181.960671][ T9] usb 1-1: SerialNumber: syz [ 181.965720][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 181.974686][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.985885][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.995504][ T9] usb 1-1: config 0 descriptor?? [ 182.002539][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.017071][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.035981][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.045984][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.068544][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.080028][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.088389][ T5282] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.112131][ T5282] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.135947][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.152722][ T5282] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 182.172785][ T5282] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 182.191286][ T5282] usb 2-1: Product: syz [ 182.196207][ T5282] usb 2-1: Manufacturer: syz [ 182.200893][ T5282] usb 2-1: SerialNumber: syz [ 182.231893][ T5282] usb 2-1: config 0 descriptor?? [ 182.246087][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 182.272163][ T5282] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 182.350422][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 182.404079][ T5289] usb 2-1: USB disconnect, device number 23 [ 182.415210][ T5289] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 182.543807][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 182.774430][ T5297] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.924650][ T5297] usb 3-1: Using ep0 maxpacket: 32 [ 182.940719][ T5297] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 182.956964][ T5297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.965634][ T5297] usb 3-1: Product: syz [ 182.969859][ T5297] usb 3-1: Manufacturer: syz [ 182.976682][ T5297] usb 3-1: SerialNumber: syz [ 182.983395][ T5297] usb 3-1: config 0 descriptor?? [ 182.986049][ T5240] Bluetooth: hci1: command tx timeout [ 182.996934][ T5297] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 183.230490][ T7432] veth0_macvtap: entered promiscuous mode [ 183.263728][ T7432] veth1_macvtap: entered promiscuous mode [ 183.347084][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.374565][ T5297] gspca_ov534_9: reg_w failed -71 [ 183.400929][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.417301][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.433285][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.450107][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.461301][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.481388][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.491595][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.508441][ T9] gspca_zc3xx: reg_w_i err -71 [ 183.515395][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.531508][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.555365][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.571859][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.593345][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.637538][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.687152][ T7432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.697721][ T7432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.706929][ T7432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.715932][ T7432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.784975][ T5297] gspca_ov534_9: Unknown sensor 0000 [ 183.785050][ T5297] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 183.822375][ T5297] usb 3-1: USB disconnect, device number 14 [ 183.927444][ T3706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.969488][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.975046][ T7480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.994979][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.007450][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.018435][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.033275][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.049275][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.052480][ T7480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.074650][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.082084][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.154464][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 184.160914][ T9] gspca_zc3xx 1-1:0.28: probe with driver gspca_zc3xx failed with error -71 [ 184.181805][ T3706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.216555][ T9] usb 1-1: USB disconnect, device number 22 [ 184.222629][ T7480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.259241][ T7480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.272584][ T7579] trusted_key: syz.2.369 sent an empty control message without MSG_MORE. [ 184.332541][ T3706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.439783][ T3706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.461509][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.496607][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.554466][ T5297] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 184.760711][ T5297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.796804][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.816339][ T5297] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 184.853771][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.903090][ T5297] usb 3-1: config 0 descriptor?? [ 184.936618][ T7480] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.943718][ T3706] bridge_slave_1: left allmulticast mode [ 184.953295][ T3706] bridge_slave_1: left promiscuous mode [ 184.961874][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.971947][ T3706] bridge_slave_0: left allmulticast mode [ 184.980569][ T3706] bridge_slave_0: left promiscuous mode [ 184.986826][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.014485][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.054651][ T5240] Bluetooth: hci1: command tx timeout [ 185.137219][ T5297] ath6kl: Failed to submit usb control message: -71 [ 185.145981][ T5297] ath6kl: unable to send the bmi data to the device: -71 [ 185.153288][ T5297] ath6kl: Unable to send get target info: -71 [ 185.180336][ T25] usb 4-1: config 0 has an invalid interface number: 81 but max is 2 [ 185.190222][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.204051][ T5297] ath6kl: Failed to init ath6kl core: -71 [ 185.210395][ T5297] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.228832][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 185.240573][ T5297] usb 3-1: USB disconnect, device number 15 [ 185.248327][ T25] usb 4-1: config 0 has no interface number 0 [ 185.257757][ T25] usb 4-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.271668][ T25] usb 4-1: config 0 interface 81 has no altsetting 0 [ 185.278485][ T25] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 185.288164][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.299386][ T25] usb 4-1: config 0 descriptor?? [ 185.483314][ T3706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.496114][ T3706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.507541][ T25] usb 4-1: string descriptor 0 read error: -71 [ 185.517909][ T25] cdc_ether 4-1:0.81: skipping garbage [ 185.519066][ T3706] bond0 (unregistering): Released all slaves [ 185.523441][ T25] cdc_ether 4-1:0.81: skipping garbage [ 185.545352][ T25] usb 4-1: bad CDC descriptors [ 185.550692][ T25] usb 4-1: unsupported MDLM descriptors [ 185.568255][ T25] usb 4-1: USB disconnect, device number 15 [ 185.597952][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.605157][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.636575][ T7576] chnl_net:caif_netlink_parms(): no params data found [ 185.767241][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.774447][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.965734][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.136315][ T7576] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.143464][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.171349][ T7576] bridge_slave_0: entered allmulticast mode [ 186.180045][ T5240] Bluetooth: hci0: command tx timeout [ 186.188380][ T7576] bridge_slave_0: entered promiscuous mode [ 186.214988][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 186.229822][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.282455][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.314656][ T7576] bridge_slave_1: entered allmulticast mode [ 186.321685][ T7576] bridge_slave_1: entered promiscuous mode [ 186.389327][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.399836][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.409166][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.378'. [ 186.419538][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.427717][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.436907][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 186.446109][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.619622][ T3706] hsr_slave_0: left promiscuous mode [ 186.629308][ T3706] hsr_slave_1: left promiscuous mode [ 186.637928][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.646633][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.655099][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.662676][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.720863][ T3706] veth1_macvtap: left promiscuous mode [ 186.726581][ T3706] veth0_macvtap: left promiscuous mode [ 186.732295][ T3706] veth1_vlan: left promiscuous mode [ 186.740619][ T3706] veth0_vlan: left promiscuous mode [ 187.064469][ T5297] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 187.224539][ T5297] usb 3-1: Using ep0 maxpacket: 8 [ 187.249006][ T5297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 187.266362][ T5297] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 187.280748][ T5297] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.280947][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 187.302840][ T5297] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 187.320977][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.329511][ T5297] usb 3-1: SerialNumber: syz [ 187.353979][ T7651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.371031][ T5297] hub 3-1:1.0: bad descriptor, ignoring hub [ 187.377832][ T5297] hub 3-1:1.0: probe with driver hub failed with error -5 [ 187.390218][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 187.591220][ T7651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.914932][ T7576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.950146][ T7480] veth0_vlan: entered promiscuous mode [ 187.976287][ T7576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.076957][ T7576] team0: Port device team_slave_0 added [ 188.104062][ T7576] team0: Port device team_slave_1 added [ 188.143960][ T7480] veth1_vlan: entered promiscuous mode [ 188.186960][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.196517][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.222950][ T7576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.244409][ T5289] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.256860][ T7576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.263848][ T7576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.290301][ T7576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.295426][ T54] Bluetooth: hci0: command tx timeout [ 188.366047][ T5297] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 188.409191][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 188.431085][ T5297] usb 3-1: USB disconnect, device number 16 [ 188.453339][ T7576] hsr_slave_0: entered promiscuous mode [ 188.477106][ T5289] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 188.477318][ T7576] hsr_slave_1: entered promiscuous mode [ 188.500767][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.501180][ T54] Bluetooth: hci2: command tx timeout [ 188.530752][ T5289] usb 4-1: Product: syz [ 188.536825][ T7576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.539600][ T5289] usb 4-1: Manufacturer: syz [ 188.549770][ T7576] Cannot create hsr debugfs directory [ 188.558627][ T5289] usb 4-1: SerialNumber: syz [ 188.607741][ T5289] usb 4-1: config 0 descriptor?? [ 188.621576][ T5289] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 188.721901][ T7480] veth0_macvtap: entered promiscuous mode [ 188.791779][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.817615][ T7670] netlink: 44 bytes leftover after parsing attributes in process `syz.2.388'. [ 188.842467][ T7480] veth1_macvtap: entered promiscuous mode [ 188.982247][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.009070][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 189.029327][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.040068][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.050090][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.060784][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.071301][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.082163][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.093404][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.172425][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.184433][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.197338][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.208264][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.220413][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.231265][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.257993][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.289865][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.309987][ T5289] gspca_stk1135: reg_w 0x3 err -71 [ 189.321061][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.327807][ T5289] gspca_stk1135: Sensor write failed [ 189.339604][ T7480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.341237][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.351032][ T7480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.362263][ T5289] gspca_stk1135: Sensor write failed [ 189.365356][ T7480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.370983][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.381629][ T7480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.395647][ T5289] gspca_stk1135: Sensor read failed [ 189.395678][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.395691][ T5289] gspca_stk1135: Sensor read failed [ 189.395700][ T5289] gspca_stk1135: Detected sensor type unknown (0x0) [ 189.395736][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.395747][ T5289] gspca_stk1135: Sensor read failed [ 189.395770][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.395780][ T5289] gspca_stk1135: Sensor read failed [ 189.395801][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.450224][ T5289] gspca_stk1135: Sensor write failed [ 189.456013][ T5289] gspca_stk1135: serial bus timeout: status=0x00 [ 189.462420][ T5289] gspca_stk1135: Sensor write failed [ 189.468136][ T5289] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 189.492639][ T5289] usb 4-1: USB disconnect, device number 16 [ 189.503740][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.685056][ T5271] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 189.817870][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.834060][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.842039][ T7641] bridge_slave_0: entered allmulticast mode [ 189.855590][ T7641] bridge_slave_0: entered promiscuous mode [ 189.858867][ T5271] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 255, changing to 11 [ 189.890404][ T5271] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 59127, setting to 1024 [ 189.933338][ T5271] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.956605][ T5271] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 189.974303][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.997341][ T5271] usb 3-1: Product: syz [ 190.012055][ T5271] usb 3-1: Manufacturer: syz [ 190.025458][ T5271] usb 3-1: SerialNumber: syz [ 190.031026][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.045843][ T5271] usb 3-1: config 0 descriptor?? [ 190.051044][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.061908][ T7687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.077754][ T7641] bridge_slave_1: entered allmulticast mode [ 190.078802][ T5271] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 190.085425][ T7641] bridge_slave_1: entered promiscuous mode [ 190.112227][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 190.154118][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 190.167438][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 190.176324][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 190.178907][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.184177][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 190.198355][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.216329][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 190.228384][ T62] bridge_slave_1: left allmulticast mode [ 190.234064][ T62] bridge_slave_1: left promiscuous mode [ 190.240621][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.248668][ T5271] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 190.263202][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 190.271763][ T62] bridge_slave_0: left allmulticast mode [ 190.272763][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 190.278032][ T62] bridge_slave_0: left promiscuous mode [ 190.291483][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.304500][ T5284] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 190.308687][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 190.324336][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 190.333242][ T5271] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 190.341903][ T54] Bluetooth: hci0: command tx timeout [ 190.356451][ T5271] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 190.465502][ T5284] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 190.488650][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.508262][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.518546][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.527208][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.538498][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.549367][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.557753][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.567152][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.577688][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.585743][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.593157][ T54] Bluetooth: hci2: command tx timeout [ 190.600706][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.611530][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.638777][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.658924][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.670129][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.689395][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.698479][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.708743][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.748194][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.757386][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.768595][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.798747][ T5284] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.808013][ T5284] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 190.825679][ T5284] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.862309][ T5284] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.871679][ T5284] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.880895][ T5284] usb 4-1: Product: syz [ 190.886077][ T5284] usb 4-1: Manufacturer: syz [ 190.890950][ T5284] usb 4-1: SerialNumber: syz [ 190.897769][ T5284] usb 4-1: config 0 descriptor?? [ 190.909710][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.914785][ T5284] yurex 4-1:0.0: Could not find endpoints [ 190.930026][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.941848][ T62] bond0 (unregistering): Released all slaves [ 190.995420][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.016095][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.072996][ T7641] team0: Port device team_slave_0 added [ 191.118509][ T7641] team0: Port device team_slave_1 added [ 191.132719][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.154628][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.157682][ T7576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.177987][ T5271] usb 4-1: USB disconnect, device number 17 [ 191.218954][ T7576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.252834][ T7576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.265502][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.279659][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.305640][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.313756][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.316258][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.342470][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.371237][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.380831][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.406783][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.413884][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.431614][ T7576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.497004][ T62] hsr_slave_0: left promiscuous mode [ 191.516617][ T62] hsr_slave_1: left promiscuous mode [ 191.523589][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.539669][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.552975][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.568076][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.605297][ T62] veth1_macvtap: left promiscuous mode [ 191.610189][ T7723] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 191.619464][ T62] veth0_macvtap: left promiscuous mode [ 191.635739][ T62] veth1_vlan: left promiscuous mode [ 191.646221][ T62] veth0_vlan: left promiscuous mode [ 192.014770][ T5284] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 192.101249][ T62] team0 (unregistering): Port device team_slave_1 removed [ 192.138962][ T62] team0 (unregistering): Port device team_slave_0 removed [ 192.187514][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 192.200326][ T5284] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 192.222960][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.235322][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.260848][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 192.285167][ T5284] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 192.294349][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.312637][ T5284] usb 4-1: config 0 descriptor?? [ 192.329051][ T5271] usb 3-1: USB disconnect, device number 17 [ 192.343898][ T5271] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 192.384753][ T5271] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 192.410474][ T5271] keyspan 3-1:0.0: device disconnected [ 192.417055][ T54] Bluetooth: hci0: command tx timeout [ 192.655072][ T54] Bluetooth: hci2: command tx timeout [ 192.736990][ T5284] usbhid 4-1:0.0: can't add hid device: -71 [ 192.743048][ T5284] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.765054][ T5284] usb 4-1: USB disconnect, device number 18 [ 192.981350][ T7726] batman_adv: batadv0: Adding interface: dummy0 [ 192.989183][ T7726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.015060][ T7726] batman_adv: batadv0: Interface activated: dummy0 [ 193.026267][ T7727] batadv0: mtu less than device minimum [ 193.033096][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.047473][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.060712][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.072278][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.084030][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.094400][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 193.103127][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.114798][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.127436][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.139456][ T7727] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.199889][ T7641] hsr_slave_0: entered promiscuous mode [ 193.215884][ T7641] hsr_slave_1: entered promiscuous mode [ 193.233071][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.241383][ T7641] Cannot create hsr debugfs directory [ 193.257956][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.281678][ T7741] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 193.291539][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.307613][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.325106][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.334179][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.342516][ T25] usb 3-1: SerialNumber: syz [ 193.391949][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.409630][ T7741] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 193.558465][ T25] usb 3-1: 0:2 : does not exist [ 193.590483][ T25] usb 3-1: USB disconnect, device number 18 [ 193.639729][ T5479] udevd[5479]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.851166][ T7576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.894190][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.932698][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.939926][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.039510][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.046713][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.288022][ T7576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.352126][ T7641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.373234][ T7641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.384215][ T7641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.417421][ T7641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.480777][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 194.480795][ T29] audit: type=1326 audit(1728013719.831:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfed7dff9 code=0x7ffc0000 [ 194.504713][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523037][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581091][ T29] audit: type=1326 audit(1728013719.871:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfed7dff9 code=0x7ffc0000 [ 194.603362][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.651553][ T29] audit: type=1326 audit(1728013719.871:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4dfed7dff9 code=0x7ffc0000 [ 194.738726][ T7788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.744410][ T54] Bluetooth: hci2: command tx timeout [ 194.888702][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 194.987205][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.409'. [ 195.005153][ T5289] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 195.033750][ T7576] veth0_vlan: entered promiscuous mode [ 195.069972][ T7576] veth1_vlan: entered promiscuous mode [ 195.174685][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 195.197221][ T5289] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 195.230204][ T29] audit: type=1326 audit(1728013720.581:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfed7dff9 code=0x7ffc0000 [ 195.248961][ T7576] veth0_macvtap: entered promiscuous mode [ 195.252381][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.264514][ T29] audit: type=1326 audit(1728013720.581:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7777 comm="syz.2.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dfed7dff9 code=0x7ffc0000 [ 195.280470][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.286677][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.308854][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.333295][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.340633][ T7576] veth1_macvtap: entered promiscuous mode [ 195.361845][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 195.399464][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.421961][ T5289] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 195.426671][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.441884][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.457676][ T5289] usb 5-1: config 0 descriptor?? [ 195.463033][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.482629][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.503447][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.525579][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.540030][ T7810] vlan2: entered allmulticast mode [ 195.548324][ T7810] xfrm0: entered allmulticast mode [ 195.576543][ T7810] team0: Port device vlan2 added [ 195.584492][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.591611][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.613569][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.643918][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.654051][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.665035][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.674912][ T7576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.685595][ T7576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.715681][ T7576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.740140][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.747452][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.778020][ T7576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.794736][ T7576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.813999][ T7576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.840492][ T7576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.894405][ T5289] usbhid 5-1:0.0: can't add hid device: -71 [ 195.900547][ T5289] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 195.956651][ T5289] usb 5-1: USB disconnect, device number 21 [ 195.960047][ T7825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'. [ 196.097326][ T7832] netlink: 'syz.2.420': attribute type 23 has an invalid length. [ 196.124040][ T7641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.241255][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.268352][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.304381][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.387352][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.406554][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.591414][ T29] audit: type=1326 audit(1728013721.941:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0c37dff9 code=0x7ffc0000 [ 196.638051][ T29] audit: type=1326 audit(1728013721.941:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0c37dff9 code=0x7ffc0000 [ 196.718492][ T29] audit: type=1326 audit(1728013721.941:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fbc0c37dff9 code=0x7ffc0000 [ 196.793623][ T29] audit: type=1326 audit(1728013721.941:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0c37dff9 code=0x7ffc0000 [ 196.859490][ T29] audit: type=1326 audit(1728013721.941:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.4.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc0c37dff9 code=0x7ffc0000 [ 197.242900][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 197.256492][ T7641] veth0_vlan: entered promiscuous mode [ 197.280188][ T7641] veth1_vlan: entered promiscuous mode [ 197.340969][ T7641] veth0_macvtap: entered promiscuous mode [ 197.359638][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 197.383699][ T7641] veth1_macvtap: entered promiscuous mode [ 197.395196][ T25] usb 2-1: device descriptor read/64, error -71 [ 197.395518][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.429'. [ 197.437621][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.463039][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.474048][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.485636][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.504114][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.522616][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.534337][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.551876][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 197.567165][ T7878] vlan3: entered promiscuous mode [ 197.801562][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.854492][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.920787][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.977422][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.042614][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.084227][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.090903][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.090926][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.098843][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.140060][ T7641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.140106][ T7641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.140134][ T7641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.140169][ T7641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.357220][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.357246][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.473054][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.473081][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.695057][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 198.824567][ T25] usb 2-1: device descriptor read/64, error -71 [ 198.944656][ T25] usb usb2-port1: attempt power cycle [ 199.048582][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.437'. [ 199.204392][ T5285] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 199.304356][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 199.336015][ T25] usb 2-1: device descriptor read/8, error -71 [ 199.374431][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 199.381249][ T5285] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 199.389832][ T5285] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 199.400300][ T5285] usb 1-1: config 0 has no interface number 1 [ 199.406634][ T5285] usb 1-1: config 0 has no interface number 2 [ 199.413461][ T5285] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 199.415720][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 199.422588][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.444021][ T5285] usb 1-1: config 0 descriptor?? [ 199.574443][ T5289] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 199.582158][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 199.621905][ T25] usb 2-1: device descriptor read/8, error -71 [ 199.656298][ T9] usb 3-1: config 17 has an invalid descriptor of length 102, skipping remainder of the config [ 199.667523][ T9] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.667572][ T5285] qcserial 1-1:0.6: Qualcomm USB modem converter detected [ 199.685086][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 199.718849][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.734796][ T25] usb usb2-port1: unable to enumerate USB device [ 199.747654][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 199.755110][ T5289] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 199.766628][ T5289] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 199.787823][ T5289] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.813584][ T5289] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.824123][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.838717][ T5289] usb 4-1: Product: syz [ 199.842970][ T5289] usb 4-1: Manufacturer: syz [ 199.856376][ T5289] usb 4-1: SerialNumber: syz [ 199.983116][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.994566][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.008201][ T5544] usb 1-1: USB disconnect, device number 23 [ 200.020790][ T5544] qcserial 1-1:0.6: device disconnected [ 200.032173][ T7916] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.439'. [ 200.081501][ T7916] net_ratelimit: 30 callbacks suppressed [ 200.081519][ T7916] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 200.117281][ T5289] usb 4-1: 0:2 : does not exist [ 200.146465][ T5289] usb 4-1: USB disconnect, device number 19 [ 200.188129][ T5479] udevd[5479]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.314985][ T9] usb 3-1: string descriptor 0 read error: -71 [ 200.334791][ T9] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 200.357051][ T9] usb 3-1: USB disconnect, device number 19 [ 200.660536][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 200.680719][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'. [ 200.696851][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 200.714691][ T7969] vlan2: entered promiscuous mode [ 200.719974][ T7969] bond0: entered promiscuous mode [ 200.725194][ T7969] bond_slave_0: entered promiscuous mode [ 200.731139][ T7969] bond_slave_1: entered promiscuous mode [ 200.743776][ T7969] bond0: left promiscuous mode [ 200.744680][ T5660] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 200.750713][ T7969] bond_slave_0: left promiscuous mode [ 200.762080][ T7969] bond_slave_1: left promiscuous mode [ 200.944719][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.955475][ T5660] usb 2-1: Using ep0 maxpacket: 16 [ 200.975494][ T5660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 201.006059][ T5660] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 201.018998][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.031768][ T5660] usb 2-1: config 0 descriptor?? [ 201.145973][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 201.163397][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.163420][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.163433][ T9] usb 4-1: Product: syz [ 201.163442][ T9] usb 4-1: Manufacturer: syz [ 201.163450][ T9] usb 4-1: SerialNumber: syz [ 201.165530][ T9] usb 4-1: config 0 descriptor?? [ 201.194413][ T5289] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 201.257820][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.273173][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.280485][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.344885][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 201.355712][ T5289] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 201.365639][ T5289] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 201.373870][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.384122][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.436313][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.464635][ T5289] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.491751][ T5289] usb 3-1: config 0 has no interface number 0 [ 201.501065][ T7979] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 201.513196][ T5289] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 201.524884][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.590152][ T5289] usb 3-1: Product: syz [ 201.605060][ T7979] bond0: (slave bond_slave_0): Releasing backup interface [ 201.610118][ T5289] usb 3-1: Manufacturer: syz [ 201.631017][ T5289] usb 3-1: SerialNumber: syz [ 201.642127][ T5289] usb 3-1: config 0 descriptor?? [ 201.728198][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.840167][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.869623][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.897394][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.919216][ T5297] usb 3-1: USB disconnect, device number 20 [ 201.935887][ T5289] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 201.937952][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.955005][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.966875][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.976403][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.987248][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.999101][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.020993][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.050442][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.131774][ T11] bridge_slave_1: left allmulticast mode [ 202.138208][ T11] bridge_slave_1: left promiscuous mode [ 202.144065][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.172947][ T5289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.195162][ T5289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.215825][ T11] bridge_slave_0: left allmulticast mode [ 202.221514][ T11] bridge_slave_0: left promiscuous mode [ 202.234959][ T5289] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.262507][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.270918][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.284503][ T5289] usb 1-1: SerialNumber: syz [ 202.372465][ T5660] usbhid 2-1:0.0: can't add hid device: -71 [ 202.389061][ T5660] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 202.405796][ T5660] usb 2-1: USB disconnect, device number 28 [ 202.550351][ T5289] usb 1-1: 0:2 : does not exist [ 202.639529][ T5289] usb 1-1: USB disconnect, device number 24 [ 203.525009][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 203.547731][ T9] usb 4-1: USB disconnect, device number 20 [ 204.106916][ T5240] Bluetooth: hci1: command tx timeout [ 204.991498][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.062652][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.164525][ T5660] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 205.211059][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 205.268263][ T11] bond0 (unregistering): Released all slaves [ 205.333659][ T5660] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.375003][ T5660] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.449997][ T5660] usb 3-1: config 1 interface 0 has no altsetting 0 [ 205.509144][ T5660] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.557149][ T5660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.595848][ T5660] usb 3-1: SerialNumber: syz [ 205.637338][ T5660] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 205.682459][ T5660] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 205.995008][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 206.174495][ T54] Bluetooth: hci1: command tx timeout [ 206.349676][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.367915][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.382215][ T7988] bridge_slave_0: entered allmulticast mode [ 206.391380][ T7988] bridge_slave_0: entered promiscuous mode [ 206.426819][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.453609][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.471458][ T7988] bridge_slave_1: entered allmulticast mode [ 206.488606][ T7988] bridge_slave_1: entered promiscuous mode [ 206.607883][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.626588][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.813608][ T7988] team0: Port device team_slave_0 added [ 206.830955][ T7988] team0: Port device team_slave_1 added [ 206.923389][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.934593][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.961496][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.980041][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.001346][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.012436][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.047280][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.159545][ T7988] hsr_slave_0: entered promiscuous mode [ 207.170511][ T7988] hsr_slave_1: entered promiscuous mode [ 207.188519][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.201290][ T7988] Cannot create hsr debugfs directory [ 207.560146][ T937] usb 3-1: USB disconnect, device number 21 [ 208.254410][ T54] Bluetooth: hci1: command tx timeout [ 210.334602][ T54] Bluetooth: hci1: command tx timeout [ 211.004287][ C1] sched: DL replenish lagged too much [ 230.061239][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.077805][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.089426][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.098564][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.107397][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.114889][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.268282][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 230.277428][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 230.285539][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 230.293457][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 230.304036][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 230.316812][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.543829][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 230.553226][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 230.569592][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 230.578045][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 230.594787][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 230.603407][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.674912][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 230.684483][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 230.692808][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.703426][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.714782][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 230.722064][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 232.174596][ T54] Bluetooth: hci3: command tx timeout [ 232.414775][ T54] Bluetooth: hci5: command tx timeout [ 232.654451][ T54] Bluetooth: hci6: command tx timeout [ 232.814512][ T54] Bluetooth: hci7: command tx timeout [ 234.255674][ T54] Bluetooth: hci3: command tx timeout [ 234.494683][ T54] Bluetooth: hci5: command tx timeout [ 234.734432][ T54] Bluetooth: hci6: command tx timeout [ 234.894447][ T54] Bluetooth: hci7: command tx timeout [ 236.335467][ T54] Bluetooth: hci3: command tx timeout [ 236.574790][ T54] Bluetooth: hci5: command tx timeout [ 236.814626][ T54] Bluetooth: hci6: command tx timeout [ 236.974425][ T54] Bluetooth: hci7: command tx timeout [ 238.414376][ T54] Bluetooth: hci3: command tx timeout [ 238.654924][ T54] Bluetooth: hci5: command tx timeout [ 238.895250][ T54] Bluetooth: hci6: command tx timeout [ 239.054483][ T54] Bluetooth: hci7: command tx timeout [ 256.054775][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.061128][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.895525][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 262.908095][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 262.916235][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 262.928969][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 262.936979][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 262.944478][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 264.974775][ T5240] Bluetooth: hci8: command tx timeout [ 266.028112][ T4685] udevd[4685]: worker [5231] /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3 is taking a long time [ 267.054498][ T5240] Bluetooth: hci8: command tx timeout [ 269.134553][ T5240] Bluetooth: hci8: command tx timeout [ 271.214375][ T5240] Bluetooth: hci8: command tx timeout [ 290.559897][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 290.576345][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 290.585427][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 290.597915][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 290.611754][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 290.619353][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 290.691049][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 290.705701][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 290.721036][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 290.729312][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 290.738835][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 290.746492][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 291.454726][ T5240] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 291.469444][ T5240] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 291.479902][ T5240] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 291.490401][ T5240] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 291.504511][ T5240] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 291.513504][ T5240] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 291.592850][ T5240] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 291.610246][ T5240] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 291.621259][ T5240] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 291.629674][ T5240] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 291.637729][ T5240] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 291.645712][ T5240] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 292.654606][ T54] Bluetooth: hci9: command tx timeout [ 292.815185][ T54] Bluetooth: hci10: command tx timeout [ 293.614499][ T54] Bluetooth: hci11: command tx timeout [ 293.695575][ T54] Bluetooth: hci12: command tx timeout [ 294.734568][ T54] Bluetooth: hci9: command tx timeout [ 294.894719][ T54] Bluetooth: hci10: command tx timeout [ 295.694586][ T54] Bluetooth: hci11: command tx timeout [ 295.774616][ T54] Bluetooth: hci12: command tx timeout [ 296.814495][ T54] Bluetooth: hci9: command tx timeout [ 296.974566][ T54] Bluetooth: hci10: command tx timeout [ 297.774762][ T54] Bluetooth: hci11: command tx timeout [ 297.861280][ T54] Bluetooth: hci12: command tx timeout [ 298.894577][ T54] Bluetooth: hci9: command tx timeout [ 299.054659][ T54] Bluetooth: hci10: command tx timeout [ 299.861635][ T54] Bluetooth: hci11: command tx timeout [ 299.941022][ T54] Bluetooth: hci12: command tx timeout [ 309.233539][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 309.242755][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 317.382931][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389502][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.666928][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 323.683052][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 323.691432][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 323.705074][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 323.714688][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 323.722130][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 324.580642][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 325.774459][ T5232] Bluetooth: hci13: command tx timeout [ 327.862101][ T5232] Bluetooth: hci13: command tx timeout [ 329.934513][ T5232] Bluetooth: hci13: command tx timeout [ 332.015156][ T5232] Bluetooth: hci13: command tx timeout [ 351.200610][ T5240] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 351.216438][ T5240] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 351.226793][ T5240] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 351.234856][ T5240] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 351.242811][ T5240] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 351.254518][ T5240] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 351.265454][ T5240] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 351.277553][ T5240] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 351.305458][ T5240] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 351.325863][ T5240] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 351.335390][ T5240] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 351.343969][ T5240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 352.032396][ T5240] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 352.042259][ T5240] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 352.055252][ T5240] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 352.063352][ T5240] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 352.074847][ T5240] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 352.082276][ T5240] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 352.151493][ T5232] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 352.163557][ T5232] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 352.172297][ T5232] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 352.180981][ T5232] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 352.189090][ T5232] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 352.204497][ T5232] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 353.374414][ T5237] Bluetooth: hci15: command tx timeout [ 353.454901][ T5237] Bluetooth: hci14: command tx timeout [ 354.174554][ T5237] Bluetooth: hci16: command tx timeout [ 354.254640][ T5237] Bluetooth: hci17: command tx timeout [ 355.321926][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 355.328175][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 355.334358][ T4623] Bluetooth: hci6: command 0x0406 tx timeout [ 355.340484][ T5237] Bluetooth: hci7: command 0x0406 tx timeout [ 355.454574][ T54] Bluetooth: hci15: command tx timeout [ 355.534663][ T5240] Bluetooth: hci14: command tx timeout [ 356.254875][ T5240] Bluetooth: hci16: command tx timeout [ 356.334346][ T5240] Bluetooth: hci17: command tx timeout [ 357.534665][ T5240] Bluetooth: hci15: command tx timeout [ 357.622273][ T5240] Bluetooth: hci14: command tx timeout [ 358.334728][ T5240] Bluetooth: hci16: command tx timeout [ 358.342327][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 358.370231][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.410285][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.419283][ T5240] Bluetooth: hci17: command tx timeout [ 358.456698][ T30] task:kworker/u8:0 state:D stack:20048 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 358.544350][ T30] Workqueue: netns cleanup_net [ 358.549221][ T30] Call Trace: [ 358.552522][ T30] [ 358.614858][ T30] __schedule+0x1895/0x4b30 [ 358.619460][ T30] ? __pfx___schedule+0x10/0x10 [ 358.633611][ T30] ? __pfx_lock_release+0x10/0x10 [ 358.639211][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 358.654390][ T30] ? kthread_data+0x52/0xd0 [ 358.658954][ T30] ? schedule+0x90/0x320 [ 358.663502][ T30] ? wq_worker_sleeping+0x66/0x240 [ 358.674278][ T30] ? schedule+0x90/0x320 [ 358.678665][ T30] schedule+0x14b/0x320 [ 358.682851][ T30] schedule_preempt_disabled+0x13/0x30 [ 358.697103][ T30] __mutex_lock+0x6a7/0xd70 [ 358.701660][ T30] ? __mutex_lock+0x52a/0xd70 [ 358.712500][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 358.720007][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 358.731000][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 358.738619][ T30] ? rcu_is_watching+0x15/0xb0 [ 358.743432][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 358.758925][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 358.768463][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 358.778280][ T30] hwsim_exit_net+0x5c1/0x670 [ 358.783003][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 358.792366][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 358.802377][ T30] cleanup_net+0x802/0xcc0 [ 358.811217][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 358.819985][ T30] ? process_scheduled_works+0x976/0x1850 [ 358.829873][ T30] process_scheduled_works+0xa63/0x1850 [ 358.839088][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.851688][ T30] ? assign_work+0x364/0x3d0 [ 358.859918][ T30] worker_thread+0x870/0xd30 [ 358.868489][ T30] ? __kthread_parkme+0x169/0x1d0 [ 358.873563][ T30] ? __pfx_worker_thread+0x10/0x10 [ 358.882607][ T30] kthread+0x2f0/0x390 [ 358.890487][ T30] ? __pfx_worker_thread+0x10/0x10 [ 358.901133][ T30] ? __pfx_kthread+0x10/0x10 [ 358.909562][ T30] ret_from_fork+0x4b/0x80 [ 358.914043][ T30] ? __pfx_kthread+0x10/0x10 [ 358.923747][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.932436][ T30] [ 358.939638][ T30] INFO: task kworker/0:2:937 blocked for more than 143 seconds. [ 358.953456][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 358.964799][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.973864][ T30] task:kworker/0:2 state:D stack:20208 pid:937 tgid:937 ppid:2 flags:0x00004000 [ 358.992119][ T30] Workqueue: usb_hub_wq hub_event [ 358.997586][ T30] Call Trace: [ 359.000895][ T30] [ 359.003852][ T30] __schedule+0x1895/0x4b30 [ 359.016621][ T30] ? try_to_wake_up+0x971/0x1480 [ 359.021631][ T30] ? schedule+0x90/0x320 [ 359.033077][ T30] ? __pfx___schedule+0x10/0x10 [ 359.038299][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.051765][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.059820][ T30] ? kick_pool+0x45c/0x620 [ 359.071572][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 359.077341][ T30] ? schedule+0x90/0x320 [ 359.081624][ T30] schedule+0x14b/0x320 [ 359.096207][ T30] schedule_preempt_disabled+0x13/0x30 [ 359.101733][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 359.115893][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 359.121861][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 359.136509][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 359.141771][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 359.151733][ T30] ? __pfx___might_resched+0x10/0x10 [ 359.161130][ T30] down_write+0x1d7/0x220 [ 359.171917][ T30] ? __pfx_down_write+0x10/0x10 [ 359.179624][ T30] ? down_read+0x82b/0xa40 [ 359.184107][ T30] kernfs_remove_by_name_ns+0x7a/0x160 [ 359.196916][ T30] usb_remove_sysfs_intf_files+0x68/0xb0 [ 359.202614][ T30] usb_bus_notify+0x105/0x130 [ 359.212270][ T30] notifier_call_chain+0x19f/0x3e0 [ 359.220896][ T30] blocking_notifier_call_chain+0x69/0x90 [ 359.231726][ T30] bus_notify+0x141/0x180 [ 359.238913][ T30] device_del+0x289/0x9b0 [ 359.243295][ T30] ? __pfx_device_del+0x10/0x10 [ 359.253804][ T30] ? usb_disconnect+0x103/0x950 [ 359.262447][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.278221][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.283313][ T30] usb_disable_device+0x3bf/0x850 [ 359.293294][ T30] usb_disconnect+0x340/0x950 [ 359.314337][ T30] hub_event+0x1ebc/0x5150 [ 359.319719][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 359.333161][ T30] ? __pfx_hub_event+0x10/0x10 [ 359.339723][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 359.351735][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.358780][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.373574][ T30] ? process_scheduled_works+0x976/0x1850 [ 359.383839][ T30] process_scheduled_works+0xa63/0x1850 [ 359.394308][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.400352][ T30] ? assign_work+0x364/0x3d0 [ 359.411017][ T30] worker_thread+0x870/0xd30 [ 359.416035][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.421974][ T30] ? __kthread_parkme+0x169/0x1d0 [ 359.435759][ T30] ? __pfx_worker_thread+0x10/0x10 [ 359.440922][ T30] kthread+0x2f0/0x390 [ 359.452287][ T30] ? __pfx_worker_thread+0x10/0x10 [ 359.457875][ T30] ? __pfx_kthread+0x10/0x10 [ 359.463646][ T30] ret_from_fork+0x4b/0x80 [ 359.475271][ T30] ? __pfx_kthread+0x10/0x10 [ 359.480879][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.493200][ T30] [ 359.497810][ T30] INFO: task kworker/u8:5:1833 blocked for more than 144 seconds. [ 359.511529][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 359.520700][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.534222][ T30] task:kworker/u8:5 state:D stack:20848 pid:1833 tgid:1833 ppid:2 flags:0x00004000 [ 359.556205][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 359.562258][ T30] Call Trace: [ 359.572730][ T30] [ 359.577233][ T30] __schedule+0x1895/0x4b30 [ 359.581805][ T30] ? __pfx___schedule+0x10/0x10 [ 359.594511][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.601288][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 359.613617][ T30] ? kthread_data+0x52/0xd0 [ 359.618462][ T5240] Bluetooth: hci15: command tx timeout [ 359.626279][ T30] ? schedule+0x90/0x320 [ 359.630628][ T30] ? wq_worker_sleeping+0x66/0x240 [ 359.643555][ T30] ? schedule+0x90/0x320 [ 359.650216][ T30] schedule+0x14b/0x320 [ 359.661703][ T30] schedule_preempt_disabled+0x13/0x30 [ 359.668687][ T30] __mutex_lock+0x6a7/0xd70 [ 359.673225][ T30] ? mark_lock+0x9a/0x360 [ 359.684597][ T30] ? __mutex_lock+0x52a/0xd70 [ 359.689406][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 359.695898][ T5240] Bluetooth: hci14: command tx timeout [ 359.710534][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 359.718225][ T30] addrconf_dad_work+0xd0/0x16f0 [ 359.723217][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 359.734699][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.741084][ T30] ? process_scheduled_works+0x976/0x1850 [ 359.754472][ T30] process_scheduled_works+0xa63/0x1850 [ 359.760096][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.770007][ T30] ? assign_work+0x364/0x3d0 [ 359.779729][ T30] worker_thread+0x870/0xd30 [ 359.786016][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 359.792149][ T30] ? __kthread_parkme+0x169/0x1d0 [ 359.803341][ T30] ? __pfx_worker_thread+0x10/0x10 [ 359.812199][ T30] kthread+0x2f0/0x390 [ 359.822141][ T30] ? __pfx_worker_thread+0x10/0x10 [ 359.829322][ T30] ? __pfx_kthread+0x10/0x10 [ 359.833955][ T30] ret_from_fork+0x4b/0x80 [ 359.844406][ T30] ? __pfx_kthread+0x10/0x10 [ 359.849055][ T30] ret_from_fork_asm+0x1a/0x30 [ 359.853873][ T30] [ 359.865894][ T30] INFO: task kworker/u8:6:2919 blocked for more than 144 seconds. [ 359.884515][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 359.892193][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.908545][ T30] task:kworker/u8:6 state:D stack:21264 pid:2919 tgid:2919 ppid:2 flags:0x00004000 [ 359.923271][ T30] Workqueue: events_unbound linkwatch_event [ 359.936968][ T30] Call Trace: [ 359.940289][ T30] [ 359.943243][ T30] __schedule+0x1895/0x4b30 [ 359.952922][ T30] ? __pfx___schedule+0x10/0x10 [ 359.960441][ T30] ? __pfx_lock_release+0x10/0x10 [ 359.971069][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 359.980296][ T30] ? kthread_data+0x52/0xd0 [ 359.989663][ T30] ? schedule+0x90/0x320 [ 359.994463][ T30] ? wq_worker_sleeping+0x66/0x240 [ 359.999625][ T30] ? schedule+0x90/0x320 [ 360.003892][ T30] schedule+0x14b/0x320 [ 360.014702][ T30] schedule_preempt_disabled+0x13/0x30 [ 360.020294][ T30] __mutex_lock+0x6a7/0xd70 [ 360.034299][ T30] ? __mutex_lock+0x52a/0xd70 [ 360.039027][ T30] ? linkwatch_event+0xe/0x60 [ 360.043735][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 360.054334][ T30] ? process_scheduled_works+0x976/0x1850 [ 360.062721][ T30] linkwatch_event+0xe/0x60 [ 360.071244][ T30] process_scheduled_works+0xa63/0x1850 [ 360.083351][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.093353][ T30] ? assign_work+0x364/0x3d0 [ 360.102241][ T30] worker_thread+0x870/0xd30 [ 360.110724][ T30] ? __kthread_parkme+0x169/0x1d0 [ 360.119527][ T30] ? __pfx_worker_thread+0x10/0x10 [ 360.128518][ T30] kthread+0x2f0/0x390 [ 360.132631][ T30] ? __pfx_worker_thread+0x10/0x10 [ 360.143631][ T30] ? __pfx_kthread+0x10/0x10 [ 360.152470][ T30] ret_from_fork+0x4b/0x80 [ 360.160960][ T30] ? __pfx_kthread+0x10/0x10 [ 360.169407][ T30] ret_from_fork_asm+0x1a/0x30 [ 360.177945][ T30] [ 360.182260][ T30] INFO: task dhcpcd:4899 blocked for more than 145 seconds. [ 360.194688][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 360.202351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.219588][ T30] task:dhcpcd state:D stack:20352 pid:4899 tgid:4899 ppid:4898 flags:0x00000002 [ 360.231471][ T30] Call Trace: [ 360.240747][ T30] [ 360.243715][ T30] __schedule+0x1895/0x4b30 [ 360.251517][ T30] ? __pfx___schedule+0x10/0x10 [ 360.264233][ T30] ? __pfx_lock_release+0x10/0x10 [ 360.269398][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 360.285429][ T30] ? schedule+0x90/0x320 [ 360.289721][ T30] schedule+0x14b/0x320 [ 360.293906][ T30] schedule_preempt_disabled+0x13/0x30 [ 360.306389][ T30] __mutex_lock+0x6a7/0xd70 [ 360.310949][ T30] ? __mutex_lock+0x52a/0xd70 [ 360.320841][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 360.328328][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 360.333398][ T30] ? apparmor_capable+0x13b/0x1b0 [ 360.356538][ T30] ? bpf_lsm_capable+0x9/0x10 [ 360.361300][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 360.372042][ T30] ? get_user_ifreq+0x1bb/0x200 [ 360.379550][ T30] inet_ioctl+0x3d7/0x4f0 [ 360.385360][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 360.390251][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 360.404641][ T30] sock_do_ioctl+0x158/0x460 [ 360.409295][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 360.423472][ T5240] Bluetooth: hci16: command tx timeout [ 360.429689][ T30] ? __pfx_lock_release+0x10/0x10 [ 360.441751][ T30] sock_ioctl+0x626/0x8e0 [ 360.446447][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 360.451341][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.465711][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.472096][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 360.483679][ T30] __se_sys_ioctl+0xf9/0x170 [ 360.489820][ T30] do_syscall_64+0xf3/0x230 [ 360.501104][ T5240] Bluetooth: hci17: command tx timeout [ 360.509068][ T30] ? clear_bhb_loop+0x35/0x90 [ 360.513791][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.524642][ T30] RIP: 0033:0x7f17414ecd49 [ 360.529094][ T30] RSP: 002b:00007ffc665973c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.543995][ T30] RAX: ffffffffffffffda RBX: 00007f174141e6c0 RCX: 00007f17414ecd49 [ 360.552425][ T30] RDX: 00007ffc665a75b8 RSI: 0000000000008914 RDI: 000000000000000e [ 360.565647][ T30] RBP: 00007ffc665b7778 R08: 00007ffc665a7578 R09: 00007ffc665a7528 [ 360.573660][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.597559][ T30] R13: 00007ffc665a75b8 R14: 0000000000000028 R15: 0000000000008914 [ 360.612532][ T30] [ 360.618815][ T30] INFO: task syz-executor:7432 blocked for more than 145 seconds. [ 360.631542][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 360.641936][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 360.655653][ T30] task:syz-executor state:D stack:20992 pid:7432 tgid:7432 ppid:1 flags:0x00000004 [ 360.674280][ T30] Call Trace: [ 360.677602][ T30] [ 360.680556][ T30] __schedule+0x1895/0x4b30 [ 360.694319][ T30] ? __pfx___schedule+0x10/0x10 [ 360.699227][ T30] ? __pfx_lock_release+0x10/0x10 [ 360.711001][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 360.720129][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.732916][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 360.741401][ T30] ? schedule+0x90/0x320 [ 360.751955][ T30] schedule+0x14b/0x320 [ 360.758543][ T30] ? down_read+0x6a5/0xa40 [ 360.762991][ T30] schedule_preempt_disabled+0x13/0x30 [ 360.775754][ T30] down_read+0x705/0xa40 [ 360.780054][ T30] ? __pfx_down_read+0x10/0x10 [ 360.790992][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 360.797671][ T30] ? __d_lookup+0x64/0x7b0 [ 360.802127][ T30] ? __d_lookup+0x64/0x7b0 [ 360.813747][ T30] ? __d_lookup+0x706/0x7b0 [ 360.819588][ T30] kernfs_dop_revalidate+0xd4/0x560 [ 360.832855][ T30] lookup_fast+0x1f4/0x4a0 [ 360.838067][ T30] ? inode_permission+0xff/0x460 [ 360.843053][ T30] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 360.856262][ T30] ? bpf_lsm_inode_permission+0x9/0x10 [ 360.861768][ T30] ? security_inode_permission+0xbc/0x320 [ 360.872622][ T30] link_path_walk+0x672/0xea0 [ 360.880125][ T30] path_openat+0x266/0x3590 [ 360.891023][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 360.900844][ T30] ? __pfx_path_openat+0x10/0x10 [ 360.910891][ T30] do_filp_open+0x235/0x490 [ 360.918292][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 360.923396][ T30] ? _raw_spin_unlock+0x28/0x50 [ 360.938046][ T30] ? alloc_fd+0x5a1/0x640 [ 360.942447][ T30] do_sys_openat2+0x13e/0x1d0 [ 360.952640][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 360.960868][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.971399][ T30] ? __pfx_get_timespec64+0x10/0x10 [ 360.979390][ T30] ? clockevents_program_event+0x240/0x350 [ 360.991765][ T30] __x64_sys_openat+0x247/0x2a0 [ 361.000287][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 361.010529][ T30] ? do_syscall_64+0x100/0x230 [ 361.018118][ T30] ? do_syscall_64+0xb6/0x230 [ 361.022845][ T30] do_syscall_64+0xf3/0x230 [ 361.032460][ T30] ? clear_bhb_loop+0x35/0x90 [ 361.041573][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.052460][ T30] RIP: 0033:0x7f7f8f17d8f1 [ 361.060243][ T30] RSP: 002b:00007f7f8f45fd50 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 361.073527][ T30] RAX: ffffffffffffffda RBX: 000000000000004c RCX: 00007f7f8f17d8f1 [ 361.084138][ T30] RDX: 0000000000090800 RSI: 00007f7f8f1f05b6 RDI: 00000000ffffff9c [ 361.093573][ T30] RBP: 00007f7f8f45fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 361.109611][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 361.119354][ T30] R13: 0000000000031ef6 R14: 0000000000031b8f R15: 00007f7f8f45fe40 [ 361.136489][ T30] [ 361.139634][ T30] INFO: task syz-executor:7988 blocked for more than 146 seconds. [ 361.156496][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 361.170499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.181369][ T30] task:syz-executor state:D stack:21728 pid:7988 tgid:7988 ppid:1 flags:0x00004004 [ 361.198722][ T30] Call Trace: [ 361.202041][ T30] [ 361.209938][ T30] __schedule+0x1895/0x4b30 [ 361.218252][ T30] ? __pfx___schedule+0x10/0x10 [ 361.223660][ T30] ? __pfx_lock_release+0x10/0x10 [ 361.232533][ T30] ? schedule+0x90/0x320 [ 361.240458][ T30] schedule+0x14b/0x320 [ 361.248421][ T30] schedule_timeout+0xb0/0x310 [ 361.253235][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 361.267479][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 361.273535][ T30] ? wait_for_completion+0x2fe/0x620 [ 361.284007][ T30] ? wait_for_completion+0x2fe/0x620 [ 361.292044][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.302258][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 361.313047][ T30] ? wait_for_completion+0x2fe/0x620 [ 361.323117][ T30] wait_for_completion+0x355/0x620 [ 361.330967][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 361.341661][ T30] ? __flush_work+0xe7/0xc50 [ 361.348920][ T30] __flush_work+0xa37/0xc50 [ 361.353460][ T30] ? __flush_work+0xe7/0xc50 [ 361.365024][ T30] ? __pfx___flush_work+0x10/0x10 [ 361.370105][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 361.391985][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 361.399289][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 361.413783][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.419501][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 361.433009][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 361.439012][ T30] ? __pfx___might_resched+0x10/0x10 [ 361.451294][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 361.460580][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 361.475191][ T30] ? rcu_is_watching+0x15/0xb0 [ 361.480003][ T30] ? trace_contention_end+0x3c/0x120 [ 361.493148][ T30] ? __mutex_lock+0x2ef/0xd70 [ 361.498299][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 361.503549][ T30] unregister_netdevice_queue+0x303/0x370 [ 361.515840][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 361.522145][ T30] nsim_destroy+0x180/0x5c0 [ 361.532916][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 361.538648][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 361.544156][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 361.558450][ T30] nsim_drv_remove+0x58/0x160 [ 361.563170][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 361.577944][ T30] bus_remove_device+0x34f/0x420 [ 361.582942][ T30] device_del+0x57a/0x9b0 [ 361.592841][ T30] ? __pfx_device_del+0x10/0x10 [ 361.600379][ T30] device_unregister+0x20/0xc0 [ 361.610118][ T30] del_device_store+0x363/0x480 [ 361.629627][ T30] ? __pfx_del_device_store+0x10/0x10 [ 361.637870][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 361.642768][ T30] ? bus_attr_store+0x4f/0xb0 [ 361.652653][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 361.660556][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 361.672115][ T30] vfs_write+0xa6d/0xc90 [ 361.678893][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 361.689953][ T30] ? __pfx_vfs_write+0x10/0x10 [ 361.700055][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 361.709673][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.718640][ T30] ? fdget_pos+0x265/0x320 [ 361.723101][ T30] ksys_write+0x183/0x2b0 [ 361.736683][ T30] ? __pfx_ksys_write+0x10/0x10 [ 361.741577][ T30] ? do_syscall_64+0x100/0x230 [ 361.751215][ T30] ? do_syscall_64+0xb6/0x230 [ 361.758591][ T30] do_syscall_64+0xf3/0x230 [ 361.763218][ T30] ? clear_bhb_loop+0x35/0x90 [ 361.772749][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.788775][ T30] RIP: 0033:0x7f6ed557cadf [ 361.793237][ T30] RSP: 002b:00007f6ed585f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 361.809562][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f6ed557cadf [ 361.821328][ T30] RDX: 0000000000000001 RSI: 00007f6ed585f270 RDI: 0000000000000005 [ 361.838296][ T30] RBP: 00007f6ed55f13ae R08: 0000000000000000 R09: 00007f6ed585f077 [ 361.851439][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 361.862262][ T30] R13: 00007f6ed585f270 R14: 00007f6ed6264620 R15: 0000000000000003 [ 361.874474][ T30] [ 361.878207][ T30] INFO: task syz.3.460:8014 blocked for more than 146 seconds. [ 361.893211][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 361.902539][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.917440][ T30] task:syz.3.460 state:D stack:27136 pid:8014 tgid:8013 ppid:7432 flags:0x00000004 [ 361.933336][ T30] Call Trace: [ 361.942420][ T30] [ 361.949482][ T30] __schedule+0x1895/0x4b30 [ 361.954142][ T30] ? __pfx___schedule+0x10/0x10 [ 361.962780][ T30] ? __pfx_lock_release+0x10/0x10 [ 361.971593][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 361.980741][ T30] ? schedule+0x90/0x320 [ 361.988736][ T30] schedule+0x14b/0x320 [ 361.992938][ T30] schedule_preempt_disabled+0x13/0x30 [ 362.003740][ T30] __mutex_lock+0x6a7/0xd70 [ 362.011988][ T30] ? __mutex_lock+0x52a/0xd70 [ 362.020488][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.031848][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 362.041229][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.051510][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 362.061026][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.070362][ T30] ? ref_tracker_free+0x643/0x7e0 [ 362.079102][ T30] netlink_rcv_skb+0x1e3/0x430 [ 362.083922][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.093277][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.103731][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.112729][ T30] netlink_unicast+0x7f6/0x990 [ 362.121148][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 362.131332][ T30] ? __virt_addr_valid+0x183/0x530 [ 362.140324][ T30] ? __check_object_size+0x48e/0x900 [ 362.150287][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 362.160285][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.169809][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 362.178766][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.184101][ T30] __sock_sendmsg+0x221/0x270 [ 362.192893][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 362.201911][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.212202][ T30] __sys_sendmsg+0x292/0x380 [ 362.220580][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.230596][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.240629][ T30] ? do_syscall_64+0x100/0x230 [ 362.249381][ T30] ? do_syscall_64+0xb6/0x230 [ 362.254101][ T30] do_syscall_64+0xf3/0x230 [ 362.267932][ T30] ? clear_bhb_loop+0x35/0x90 [ 362.272660][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.282838][ T30] RIP: 0033:0x7f7f8f17dff9 [ 362.291190][ T30] RSP: 002b:00007f7f8ebff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.303335][ T30] RAX: ffffffffffffffda RBX: 00007f7f8f335f80 RCX: 00007f7f8f17dff9 [ 362.317401][ T30] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 362.330448][ T30] RBP: 00007f7f8f1f0296 R08: 0000000000000000 R09: 0000000000000000 [ 362.342440][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.358009][ T30] R13: 0000000000000000 R14: 00007f7f8f335f80 R15: 00007f7f8f45fa28 [ 362.370267][ T30] [ 362.373403][ T30] INFO: task syz.1.463:8026 blocked for more than 147 seconds. [ 362.384625][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 362.392294][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.407818][ T30] task:syz.1.463 state:D stack:27392 pid:8026 tgid:8025 ppid:7576 flags:0x00000004 [ 362.433907][ T30] Call Trace: [ 362.440928][ T30] [ 362.443910][ T30] __schedule+0x1895/0x4b30 [ 362.452360][ T30] ? __pfx___schedule+0x10/0x10 [ 362.461252][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.470043][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 362.482826][ T30] ? schedule+0x90/0x320 [ 362.490994][ T30] schedule+0x14b/0x320 [ 362.500637][ T30] schedule_preempt_disabled+0x13/0x30 [ 362.510561][ T30] __mutex_lock+0x6a7/0xd70 [ 362.517707][ T30] ? __mutex_lock+0x52a/0xd70 [ 362.522429][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.535021][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 362.540140][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.551288][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 362.557060][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.562569][ T30] ? ref_tracker_free+0x643/0x7e0 [ 362.574643][ T30] netlink_rcv_skb+0x1e3/0x430 [ 362.579468][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.593159][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.598857][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.604100][ T30] netlink_unicast+0x7f6/0x990 [ 362.614222][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 362.619552][ T30] ? __virt_addr_valid+0x183/0x530 [ 362.632019][ T30] ? __check_object_size+0x48e/0x900 [ 362.639964][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 362.652092][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.662298][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 362.674502][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.679841][ T30] __sock_sendmsg+0x221/0x270 [ 362.692568][ T30] __sys_sendto+0x39b/0x4f0 [ 362.698191][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 362.703280][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.717235][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.723621][ T30] ? exc_page_fault+0x590/0x8c0 [ 362.733473][ T30] __x64_sys_sendto+0xde/0x100 [ 362.750688][ T30] do_syscall_64+0xf3/0x230 [ 362.757784][ T30] ? clear_bhb_loop+0x35/0x90 [ 362.762557][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.773698][ T30] RIP: 0033:0x7f3cb497fe8c [ 362.780766][ T30] RSP: 002b:00007f3cb5796ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 362.795928][ T30] RAX: ffffffffffffffda RBX: 00007f3cb5796fc0 RCX: 00007f3cb497fe8c [ 362.804036][ T30] RDX: 0000000000000024 RSI: 00007f3cb5797010 RDI: 0000000000000006 [ 362.820002][ T30] RBP: 0000000000000000 R08: 00007f3cb5796f14 R09: 000000000000000c [ 362.830368][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 362.848620][ T30] R13: 00007f3cb5796f68 R14: 00007f3cb5797010 R15: 0000000000000000 [ 362.860698][ T30] [ 362.863940][ T30] INFO: task syz.1.463:8028 blocked for more than 147 seconds. [ 362.875386][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 362.883057][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.899248][ T30] task:syz.1.463 state:D stack:27136 pid:8028 tgid:8025 ppid:7576 flags:0x00000004 [ 362.912390][ T30] Call Trace: [ 362.923637][ T30] [ 362.928245][ T30] __schedule+0x1895/0x4b30 [ 362.932816][ T30] ? __pfx___schedule+0x10/0x10 [ 362.944960][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.950047][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 362.964157][ T30] ? schedule+0x90/0x320 [ 362.968515][ T30] schedule+0x14b/0x320 [ 362.973308][ T30] schedule_preempt_disabled+0x13/0x30 [ 362.986122][ T30] __mutex_lock+0x6a7/0xd70 [ 362.990733][ T30] ? __mutex_lock+0x52a/0xd70 [ 363.000431][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 363.008291][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 363.013376][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 363.024494][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 363.029685][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.042205][ T30] ? ref_tracker_free+0x643/0x7e0 [ 363.048797][ T30] netlink_rcv_skb+0x1e3/0x430 [ 363.053619][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.068038][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.073406][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.085467][ T30] netlink_unicast+0x7f6/0x990 [ 363.090298][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 363.101706][ T30] ? __virt_addr_valid+0x183/0x530 [ 363.108330][ T30] ? __check_object_size+0x48e/0x900 [ 363.113662][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 363.126909][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.132274][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 363.145218][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.154383][ T30] __sock_sendmsg+0x221/0x270 [ 363.159118][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 363.170400][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.178246][ T30] __sys_sendmsg+0x292/0x380 [ 363.182881][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.194671][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.201052][ T30] ? do_syscall_64+0x100/0x230 [ 363.212921][ T30] ? do_syscall_64+0xb6/0x230 [ 363.225567][ T30] do_syscall_64+0xf3/0x230 [ 363.230133][ T30] ? clear_bhb_loop+0x35/0x90 [ 363.243850][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.250123][ T30] RIP: 0033:0x7f3cb497dff9 [ 363.263358][ T30] RSP: 002b:00007f3cb5777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.274477][ T30] RAX: ffffffffffffffda RBX: 00007f3cb4b36058 RCX: 00007f3cb497dff9 [ 363.282490][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 363.297767][ T30] RBP: 00007f3cb49f0296 R08: 0000000000000000 R09: 0000000000000000 [ 363.309973][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.323380][ T30] R13: 0000000000000000 R14: 00007f3cb4b36058 R15: 00007f3cb4c5fa28 [ 363.335277][ T30] [ 363.338354][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 363.354805][ T30] INFO: task syz.1.463:8029 blocked for more than 148 seconds. [ 363.362395][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 363.378813][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.391371][ T30] task:syz.1.463 state:D stack:27136 pid:8029 tgid:8025 ppid:7576 flags:0x00000004 [ 363.405314][ T30] Call Trace: [ 363.408629][ T30] [ 363.411584][ T30] __schedule+0x1895/0x4b30 [ 363.421843][ T30] ? __pfx___schedule+0x10/0x10 [ 363.430516][ T30] ? __pfx_lock_release+0x10/0x10 [ 363.440413][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 363.448443][ T30] ? schedule+0x90/0x320 [ 363.452734][ T30] schedule+0x14b/0x320 [ 363.476596][ T30] schedule_preempt_disabled+0x13/0x30 [ 363.482289][ T30] __mutex_lock+0x6a7/0xd70 [ 363.496121][ T30] ? __mutex_lock+0x52a/0xd70 [ 363.501304][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 363.513583][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 363.519141][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 363.524118][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 363.536885][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.542399][ T30] ? ref_tracker_free+0x643/0x7e0 [ 363.554232][ T30] netlink_rcv_skb+0x1e3/0x430 [ 363.561592][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.572102][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.580016][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.591184][ T30] netlink_unicast+0x7f6/0x990 [ 363.599982][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 363.610164][ T30] ? __virt_addr_valid+0x183/0x530 [ 363.617876][ T30] ? __check_object_size+0x48e/0x900 [ 363.623209][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 363.633154][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.641415][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 363.652686][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.661717][ T30] __sock_sendmsg+0x221/0x270 [ 363.671312][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 363.678663][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.684040][ T30] __sys_sendmsg+0x292/0x380 [ 363.693913][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.708066][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.719301][ T30] ? do_syscall_64+0x100/0x230 [ 363.724113][ T30] ? do_syscall_64+0xb6/0x230 [ 363.731463][ T30] do_syscall_64+0xf3/0x230 [ 363.740861][ T30] ? clear_bhb_loop+0x35/0x90 [ 363.750196][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.761003][ T30] RIP: 0033:0x7f3cb497dff9 [ 363.769229][ T30] RSP: 002b:00007f3cb5756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.784501][ T30] RAX: ffffffffffffffda RBX: 00007f3cb4b36130 RCX: 00007f3cb497dff9 [ 363.792529][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 363.809380][ T30] RBP: 00007f3cb49f0296 R08: 0000000000000000 R09: 0000000000000000 [ 363.821939][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.833643][ T30] R13: 0000000000000000 R14: 00007f3cb4b36130 R15: 00007f3cb4c5fa28 [ 363.845424][ T30] [ 363.848481][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 363.867435][ T30] INFO: task syz.0.464:8040 blocked for more than 148 seconds. [ 363.883159][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 363.891261][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.904277][ T30] task:syz.0.464 state:D stack:27136 pid:8040 tgid:8039 ppid:7641 flags:0x00000004 [ 363.921007][ T30] Call Trace: [ 363.925355][ T30] [ 363.928324][ T30] __schedule+0x1895/0x4b30 [ 363.932882][ T30] ? __pfx___schedule+0x10/0x10 [ 363.945290][ T30] ? __pfx_lock_release+0x10/0x10 [ 363.950370][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 363.963402][ T30] ? schedule+0x90/0x320 [ 363.970623][ T30] schedule+0x14b/0x320 [ 363.980907][ T30] schedule_preempt_disabled+0x13/0x30 [ 363.988206][ T30] __mutex_lock+0x6a7/0xd70 [ 363.992753][ T30] ? __mutex_lock+0x52a/0xd70 [ 364.003770][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 364.012021][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.023316][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 364.029881][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 364.041689][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.048655][ T30] ? ref_tracker_free+0x643/0x7e0 [ 364.053737][ T30] netlink_rcv_skb+0x1e3/0x430 [ 364.064635][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.072861][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.085362][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.090620][ T30] netlink_unicast+0x7f6/0x990 [ 364.103160][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 364.108827][ T30] ? __virt_addr_valid+0x183/0x530 [ 364.113981][ T30] ? __check_object_size+0x48e/0x900 [ 364.127876][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 364.132701][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.143174][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 364.151472][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.161626][ T30] __sock_sendmsg+0x221/0x270 [ 364.168963][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 364.176504][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.181849][ T30] __sys_sendmsg+0x292/0x380 [ 364.194467][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.199682][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.212112][ T30] ? do_syscall_64+0x100/0x230 [ 364.218424][ T30] ? do_syscall_64+0xb6/0x230 [ 364.223151][ T30] do_syscall_64+0xf3/0x230 [ 364.236377][ T30] ? clear_bhb_loop+0x35/0x90 [ 364.241112][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.253266][ T30] RIP: 0033:0x7f54c477dff9 [ 364.260314][ T30] RSP: 002b:00007f54c5575038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.274262][ T30] RAX: ffffffffffffffda RBX: 00007f54c4935f80 RCX: 00007f54c477dff9 [ 364.291001][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 364.301115][ T30] RBP: 00007f54c47f0296 R08: 0000000000000000 R09: 0000000000000000 [ 364.315330][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.323336][ T30] R13: 0000000000000000 R14: 00007f54c4935f80 R15: 00007f54c4a5fa28 [ 364.339743][ T30] [ 364.342799][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 364.352525][ T30] INFO: task syz.0.464:8041 blocked for more than 149 seconds. [ 364.366055][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 364.373715][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.391108][ T30] task:syz.0.464 state:D stack:27392 pid:8041 tgid:8039 ppid:7641 flags:0x00000004 [ 364.403157][ T30] Call Trace: [ 364.412797][ T30] [ 364.417504][ T30] __schedule+0x1895/0x4b30 [ 364.422087][ T30] ? __pfx___schedule+0x10/0x10 [ 364.434869][ T30] ? __pfx_lock_release+0x10/0x10 [ 364.439947][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 364.452512][ T30] ? schedule+0x90/0x320 [ 364.457183][ T30] schedule+0x14b/0x320 [ 364.461382][ T30] schedule_preempt_disabled+0x13/0x30 [ 364.474153][ T30] __mutex_lock+0x6a7/0xd70 [ 364.480764][ T30] ? __mutex_lock+0x52a/0xd70 [ 364.504540][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 364.510067][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.522848][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 364.528542][ T30] ? schedule+0x90/0x320 [ 364.532826][ T30] ? schedule+0x90/0x320 [ 364.545807][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 364.551573][ T30] ? __futex_wait+0x287/0x320 [ 364.563483][ T30] do_ip_setsockopt+0x129f/0x3cd0 [ 364.568864][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 364.584446][ T30] ? aa_sk_perm+0x96d/0xab0 [ 364.589004][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 364.593962][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 364.608452][ T30] ip_setsockopt+0x63/0x100 [ 364.613096][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 364.624001][ T30] do_sock_setsockopt+0x3af/0x720 [ 364.632118][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 364.642602][ T30] ? __fget_files+0x29/0x470 [ 364.651251][ T30] ? __fget_files+0x3f3/0x470 [ 364.660902][ T30] ? __fget_files+0x29/0x470 [ 364.668116][ T30] __sys_setsockopt+0x1a2/0x250 [ 364.673004][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 364.683100][ T30] do_syscall_64+0xf3/0x230 [ 364.691353][ T30] ? clear_bhb_loop+0x35/0x90 [ 364.702493][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.710924][ T30] RIP: 0033:0x7f54c477dff9 [ 364.720788][ T30] RSP: 002b:00007f54c5554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.731811][ T30] RAX: ffffffffffffffda RBX: 00007f54c4936058 RCX: 00007f54c477dff9 [ 364.752182][ T30] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 364.762742][ T30] RBP: 00007f54c47f0296 R08: 0000000000000010 R09: 0000000000000000 [ 364.774455][ T30] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 364.782464][ T30] R13: 0000000000000000 R14: 00007f54c4936058 R15: 00007f54c4a5fa28 [ 364.798183][ T30] [ 364.801330][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 364.822445][ T30] INFO: task syz.0.464:8042 blocked for more than 149 seconds. [ 364.833447][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 364.846033][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.861408][ T30] task:syz.0.464 state:D stack:27392 pid:8042 tgid:8039 ppid:7641 flags:0x00000004 [ 364.874332][ T30] Call Trace: [ 364.877657][ T30] [ 364.880611][ T30] __schedule+0x1895/0x4b30 [ 364.893670][ T30] ? __pfx___schedule+0x10/0x10 [ 364.900972][ T30] ? __pfx_lock_release+0x10/0x10 [ 364.914769][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 364.920301][ T30] ? schedule+0x90/0x320 [ 364.931746][ T30] schedule+0x14b/0x320 [ 364.936960][ T30] schedule_preempt_disabled+0x13/0x30 [ 364.942487][ T30] __mutex_lock+0x6a7/0xd70 [ 364.958318][ T30] ? __mutex_lock+0x52a/0xd70 [ 364.963049][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 364.974410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.979490][ T30] ? __lock_acquire+0x1384/0x2050 [ 364.991212][ T30] ? __pfx_validate_chain+0x10/0x10 [ 364.997880][ T30] ? cgroup_rstat_updated+0x13b/0xc60 [ 365.003298][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 365.014611][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 365.022141][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 365.034248][ T30] do_ip_setsockopt+0x129f/0x3cd0 [ 365.039335][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 365.052621][ T30] ? aa_sk_perm+0x96d/0xab0 [ 365.057734][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 365.062621][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 365.075783][ T30] ip_setsockopt+0x63/0x100 [ 365.080339][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 365.093017][ T30] do_sock_setsockopt+0x3af/0x720 [ 365.099574][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 365.112335][ T30] ? __fget_files+0x29/0x470 [ 365.117527][ T30] ? __fget_files+0x3f3/0x470 [ 365.122237][ T30] ? __fget_files+0x29/0x470 [ 365.135458][ T30] __sys_setsockopt+0x1a2/0x250 [ 365.140367][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 365.152891][ T30] do_syscall_64+0xf3/0x230 [ 365.158443][ T30] ? clear_bhb_loop+0x35/0x90 [ 365.163174][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.174210][ T30] RIP: 0033:0x7f54c477dff9 [ 365.178659][ T30] RSP: 002b:00007f54c5533038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.195101][ T30] RAX: ffffffffffffffda RBX: 00007f54c4936130 RCX: 00007f54c477dff9 [ 365.211661][ T30] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 365.220497][ T30] RBP: 00007f54c47f0296 R08: 0000000000000004 R09: 0000000000000000 [ 365.237088][ T30] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.249928][ T30] R13: 0000000000000001 R14: 00007f54c4936130 R15: 00007f54c4a5fa28 [ 365.260601][ T30] [ 365.263656][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 365.284382][ T30] [ 365.284382][ T30] Showing all locks held in the system: [ 365.292149][ T30] 3 locks held by kworker/0:1/9: [ 365.306759][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 365.326837][ T30] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 365.343271][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 365.356686][ T30] 4 locks held by kworker/u8:0/11: [ 365.361852][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 365.376767][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 365.396579][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 365.412154][ T30] #3: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 365.424790][ T30] 1 lock held by khungtaskd/30: [ 365.429995][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 365.446135][ T30] 6 locks held by kworker/0:2/937: [ 365.451292][ T30] #0: ffff888020ebd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 365.469782][ T30] #1: ffffc90003b77d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 365.483309][ T30] #2: ffff888144395190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 365.499533][ T30] #3: ffff88802ea24190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 365.513366][ T30] #4: ffff888020ef4a78 (&(&priv->bus_notifier)->rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x53/0x90 [ 365.532601][ T30] #5: ffff88801baee948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_remove_by_name_ns+0x7a/0x160 [ 365.562215][ T30] 3 locks held by kworker/u8:5/1833: [ 365.567842][ T30] #0: ffff88814b9a9948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 365.584490][ T30] #1: ffffc90004b2fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 365.607242][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 365.625396][ T30] 3 locks held by kworker/u8:6/2919: [ 365.630722][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 365.650285][ T30] #1: ffffc90009a47d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 365.664013][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 365.678423][ T30] 1 lock held by dhcpcd/4899: [ 365.683135][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 365.695207][ T30] 2 locks held by getty/4983: [ 365.699912][ T30] #0: ffff88803315a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 365.715896][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 365.732687][ T30] 4 locks held by udevd/5231: [ 365.739565][ T30] #0: ffff888026f2fc30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 365.757006][ T30] #1: ffff8880120acc88 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 365.772663][ T30] #2: ffff88807dbe2c38 (kn->active#33){.+.+}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 365.788400][ T30] #3: ffff88805e0a8190 (&dev->mutex){....}-{3:3}, at: serial_show+0x26/0xa0 [ 365.804291][ T30] 4 locks held by kworker/1:5/5285: [ 365.809538][ T30] 8 locks held by kworker/1:6/5289: [ 365.823198][ T30] 3 locks held by kworker/1:8/5297: [ 365.828809][ T30] 1 lock held by syz-executor/7207: [ 365.834624][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 365.843665][ T30] 1 lock held by syz-executor/7432: [ 365.857802][ T30] #0: ffff88801baee948 (&root->kernfs_rwsem){++++}-{3:3}, at: kernfs_dop_revalidate+0xd4/0x560 [ 365.876357][ T30] 8 locks held by syz-executor/7988: [ 365.881700][ T30] #0: ffff888030db8420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 365.894732][ T30] #1: ffff888028cb2088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 365.914776][ T30] #2: ffff888143f412d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 365.932322][ T30] #3: ffffffff8f56f848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 365.945011][ T30] #4: ffff88805af820e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 365.964120][ T30] #5: ffff88805af80250 (&devlink->lock_key#28){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 365.981685][ T30] #6: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 365.991058][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 366.010724][ T30] 1 lock held by syz.3.460/8014: [ 366.018925][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 366.034506][ T30] 1 lock held by syz.1.463/8026: [ 366.039525][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 366.057900][ T30] 1 lock held by syz.1.463/8028: [ 366.062873][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 366.078202][ T30] 1 lock held by syz.1.463/8029: [ 366.083183][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 366.095546][ T30] 1 lock held by syz.0.464/8040: [ 366.100526][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 366.120087][ T30] 1 lock held by syz.0.464/8041: [ 366.129476][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 366.143467][ T30] 1 lock held by syz.0.464/8042: [ 366.152310][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 366.167740][ T30] 2 locks held by syz-executor/8057: [ 366.173071][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.190841][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.201491][ T30] 2 locks held by syz-executor/8059: [ 366.215163][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.232825][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.243958][ T30] 2 locks held by syz-executor/8061: [ 366.256322][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.271743][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.285733][ T30] 2 locks held by syz-executor/8063: [ 366.291051][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.308449][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.323779][ T30] 2 locks held by syz-executor/8066: [ 366.334425][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.351509][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.363818][ T30] 2 locks held by syz-executor/8070: [ 366.374469][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.390645][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.401053][ T30] 2 locks held by syz-executor/8072: [ 366.414217][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.423704][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.443034][ T30] 2 locks held by syz-executor/8076: [ 366.449048][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.467708][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.482591][ T30] 2 locks held by syz-executor/8078: [ 366.490531][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.505077][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.523004][ T30] 2 locks held by syz-executor/8081: [ 366.530993][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.544208][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.560716][ T30] 2 locks held by syz-executor/8086: [ 366.567957][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.593702][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.604246][ T30] 2 locks held by syz-executor/8087: [ 366.609564][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.627597][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.646585][ T30] 2 locks held by syz-executor/8092: [ 366.652201][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.669647][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.683914][ T30] 2 locks held by syz-executor/8093: [ 366.694081][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 366.710677][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 366.724135][ T30] [ 366.731347][ T30] ============================================= [ 366.731347][ T30] [ 366.743633][ T30] NMI backtrace for cpu 0 [ 366.748002][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 366.758531][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.768609][ T30] Call Trace: [ 366.771917][ T30] [ 366.774861][ T30] dump_stack_lvl+0x241/0x360 [ 366.779561][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.784779][ T30] ? __pfx__printk+0x10/0x10 [ 366.789402][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 366.794365][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 366.799854][ T30] ? _printk+0xd5/0x120 [ 366.804032][ T30] ? __pfx__printk+0x10/0x10 [ 366.808647][ T30] ? __wake_up_klogd+0xcc/0x110 [ 366.813520][ T30] ? __pfx__printk+0x10/0x10 [ 366.818149][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 366.823210][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 366.829220][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 366.835233][ T30] watchdog+0xff4/0x1040 [ 366.839589][ T30] ? watchdog+0x1ea/0x1040 [ 366.844035][ T30] ? __pfx_watchdog+0x10/0x10 [ 366.848743][ T30] kthread+0x2f0/0x390 [ 366.852832][ T30] ? __pfx_watchdog+0x10/0x10 [ 366.857538][ T30] ? __pfx_kthread+0x10/0x10 [ 366.862153][ T30] ret_from_fork+0x4b/0x80 [ 366.866594][ T30] ? __pfx_kthread+0x10/0x10 [ 366.871208][ T30] ret_from_fork_asm+0x1a/0x30 [ 366.876050][ T30] [ 366.880067][ T30] Sending NMI from CPU 0 to CPUs 1: [ 366.885733][ C1] NMI backtrace for cpu 1 [ 366.885746][ C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:5 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 366.885767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.885778][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 366.885803][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x234/0x780 [ 366.885827][ C1] Code: 49 c1 ef 03 48 ba 00 00 00 00 00 fc ff df 41 0f b6 04 17 84 c0 0f 85 0f 04 00 00 41 83 3e 00 0f 8e e3 00 00 00 48 8b 44 24 10 <48> 8d 98 e0 0a 00 00 4c 8d a0 00 0b 00 00 45 31 ed 49 83 fd 31 0f [ 366.885842][ C1] RSP: 0000:ffffc90000a17da0 EFLAGS: 00000002 [ 366.885856][ C1] RAX: ffff88803062bc00 RBX: ffff88803062bc00 RCX: ffffffff9a3cc903 [ 366.885869][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c60f860 [ 366.885881][ C1] RBP: ffffc90000a17e48 R08: ffffffff901ce7af R09: 1ffffffff2039cf5 [ 366.885894][ C1] R10: dffffc0000000000 R11: fffffbfff2039cf6 R12: dffffc0000000000 [ 366.885906][ C1] R13: 1ffff92000142fcc R14: ffff88803062c6d8 R15: 1ffff110060c58db [ 366.885919][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 366.885933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.885944][ C1] CR2: 0000000000000040 CR3: 000000000e734000 CR4: 00000000003526f0 [ 366.885958][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.885968][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.885979][ C1] Call Trace: [ 366.885985][ C1] [ 366.885992][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 366.886011][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 366.886032][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 366.886056][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 366.886076][ C1] ? nmi_handle+0x14f/0x5a0 [ 366.886092][ C1] ? nmi_handle+0x2a/0x5a0 [ 366.886108][ C1] ? lockdep_hardirqs_on_prepare+0x234/0x780 [ 366.886129][ C1] ? default_do_nmi+0x63/0x160 [ 366.886147][ C1] ? exc_nmi+0x123/0x1f0 [ 366.886164][ C1] ? end_repeat_nmi+0xf/0x53 [ 366.886183][ C1] ? lockdep_hardirqs_on_prepare+0x234/0x780 [ 366.886209][ C1] ? lockdep_hardirqs_on_prepare+0x234/0x780 [ 366.886231][ C1] ? lockdep_hardirqs_on_prepare+0x234/0x780 [ 366.886253][ C1] [ 366.886258][ C1] [ 366.886265][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 366.886288][ C1] ? rcu_is_watching+0x15/0xb0 [ 366.886306][ C1] trace_hardirqs_on+0x28/0x40 [ 366.886325][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 366.886345][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 366.886369][ C1] debug_check_no_obj_freed+0x561/0x580 [ 366.886393][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 366.886415][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 366.886437][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 366.886458][ C1] ? skb_release_data+0x6a0/0x8a0 [ 366.886475][ C1] ? skb_release_data+0x6a0/0x8a0 [ 366.886491][ C1] kfree+0x11f/0x440 [ 366.886509][ C1] ? rcuref_put+0x1e3/0x240 [ 366.886524][ C1] skb_release_data+0x6a0/0x8a0 [ 366.886544][ C1] consume_skb+0x9f/0xf0 [ 366.886559][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 366.886582][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 366.886603][ C1] ? nf_ip_checksum+0x13a/0x500 [ 366.886626][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 366.886648][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 366.886668][ C1] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 366.886692][ C1] ? ip_vs_conn_out_get+0xba6/0xc00 [ 366.886715][ C1] nft_do_chain+0x4ad/0x1da0 [ 366.886738][ C1] ? tcp_conn_schedule+0x45e/0x880 [ 366.886759][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 366.886788][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 366.886803][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 366.886820][ C1] nft_do_chain_inet+0x418/0x6b0 [ 366.886842][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 366.886868][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 366.886887][ C1] nf_hook_slow+0xc3/0x220 [ 366.886906][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 366.886923][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 366.886940][ C1] NF_HOOK+0x29e/0x450 [ 366.886957][ C1] ? NF_HOOK+0x9a/0x450 [ 366.886972][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 366.886988][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 366.887007][ C1] ? ip_rcv_finish+0x406/0x560 [ 366.887024][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 366.887039][ C1] NF_HOOK+0x3a4/0x450 [ 366.887054][ C1] ? __lock_acquire+0x1384/0x2050 [ 366.887075][ C1] ? NF_HOOK+0x9a/0x450 [ 366.887091][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 366.887106][ C1] ? ip_rcv_core+0x801/0xd10 [ 366.887123][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 366.887141][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 366.887158][ C1] __netif_receive_skb+0x2bf/0x650 [ 366.887177][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 366.887201][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 366.887218][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 366.887239][ C1] ? __pfx_lock_release+0x10/0x10 [ 366.887260][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 366.887283][ C1] process_backlog+0x662/0x15b0 [ 366.887303][ C1] ? process_backlog+0x33b/0x15b0 [ 366.887325][ C1] ? __pfx_process_backlog+0x10/0x10 [ 366.887343][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 366.887364][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 366.887387][ C1] __napi_poll+0xcb/0x490 [ 366.887405][ C1] net_rx_action+0x89b/0x1240 [ 366.887431][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 366.887451][ C1] ? sched_clock+0x4a/0x70 [ 366.887475][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 366.887500][ C1] handle_softirqs+0x2c5/0x980 [ 366.887521][ C1] ? do_softirq+0x11b/0x1e0 [ 366.887541][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 366.887563][ C1] do_softirq+0x11b/0x1e0 [ 366.887580][ C1] [ 366.887586][ C1] [ 366.887591][ C1] ? __pfx_do_softirq+0x10/0x10 [ 366.887610][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 366.887632][ C1] ? rcu_is_watching+0x15/0xb0 [ 366.887649][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 366.887669][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 366.887687][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 366.887706][ C1] ? neigh_destroy+0x423/0x580 [ 366.887725][ C1] neigh_periodic_work+0xb35/0xd50 [ 366.887746][ C1] ? process_scheduled_works+0x976/0x1850 [ 366.887766][ C1] process_scheduled_works+0xa63/0x1850 [ 366.887794][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.887817][ C1] ? assign_work+0x364/0x3d0 [ 366.887837][ C1] worker_thread+0x870/0xd30 [ 366.887860][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 366.887882][ C1] ? __kthread_parkme+0x169/0x1d0 [ 366.887904][ C1] ? __pfx_worker_thread+0x10/0x10 [ 366.887923][ C1] kthread+0x2f0/0x390 [ 366.887938][ C1] ? __pfx_worker_thread+0x10/0x10 [ 366.887957][ C1] ? __pfx_kthread+0x10/0x10 [ 366.887972][ C1] ret_from_fork+0x4b/0x80 [ 366.887992][ C1] ? __pfx_kthread+0x10/0x10 [ 366.888006][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.888031][ C1] [ 367.609654][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 367.616560][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 367.627085][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.637171][ T30] Call Trace: [ 367.640549][ T30] [ 367.643580][ T30] dump_stack_lvl+0x241/0x360 [ 367.648282][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.653500][ T30] ? __pfx__printk+0x10/0x10 [ 367.658112][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 367.664126][ T30] ? vscnprintf+0x5d/0x90 [ 367.668478][ T30] panic+0x349/0x880 [ 367.672402][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 367.678582][ T30] ? __pfx_panic+0x10/0x10 [ 367.683019][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 367.688412][ T30] ? __irq_work_queue_local+0x137/0x410 [ 367.693983][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 367.699373][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 367.705548][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 367.711725][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 367.717903][ T30] watchdog+0x1033/0x1040 [ 367.722266][ T30] ? watchdog+0x1ea/0x1040 [ 367.726712][ T30] ? __pfx_watchdog+0x10/0x10 [ 367.731410][ T30] kthread+0x2f0/0x390 [ 367.735494][ T30] ? __pfx_watchdog+0x10/0x10 [ 367.740195][ T30] ? __pfx_kthread+0x10/0x10 [ 367.744806][ T30] ret_from_fork+0x4b/0x80 [ 367.749240][ T30] ? __pfx_kthread+0x10/0x10 [ 367.753971][ T30] ret_from_fork_asm+0x1a/0x30 [ 367.758766][ T30] [ 367.761948][ T30] Kernel Offset: disabled [ 367.766268][ T30] Rebooting in 86400 seconds..