last executing test programs: 28.764994092s ago: executing program 3 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2b850de8f69d232e, 0x12071, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 28.250984025s ago: executing program 3 (id=693): open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) 27.924793888s ago: executing program 3 (id=695): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xc208ae62) fcntl$getown(0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000002800)={&(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0], &(0x7f0000002780)=[0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x4}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05030404d3fc02000000ab5d71acedd7c9560385dcb1894f84d7dc049806c52405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 26.858087915s ago: executing program 3 (id=700): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x1d, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x408800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x30, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x20) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3e8, 0x0, 0x200, 0x100, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'erspan0\x00', 'dvmrp0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 25.78226032s ago: executing program 3 (id=703): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x3136564e}}) 25.438632658s ago: executing program 3 (id=706): unshare(0x24000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000000300)="dff2d6ee", 0x4) 21.12418282s ago: executing program 2 (id=736): unshare(0x24000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x0, &(0x7f0000000300)="dff2d6ee", 0x4) 20.85800021s ago: executing program 2 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6}]}}}]}, 0x3c}}, 0x0) 18.468255877s ago: executing program 2 (id=743): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) creat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) syz_io_uring_submit(r4, 0x0, 0x0) r5 = mq_open(&(0x7f0000000000)='#\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x7}) mq_timedreceive(r5, &(0x7f0000000080)=""/59, 0x3b, 0x0, 0x0) mq_timedreceive(r5, &(0x7f00000044c0)=""/74, 0x4a, 0x0, &(0x7f0000004540)) 17.445773087s ago: executing program 2 (id=750): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x1d, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x408800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x30, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x20) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3e8, 0x0, 0x200, 0x100, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'erspan0\x00', 'dvmrp0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 16.560735191s ago: executing program 2 (id=759): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x0, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x800}) r4 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000000)=r4, 0x1) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000001280)={0x5, 0x4, 0x81}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = syz_io_uring_setup(0x6183, &(0x7f00000012c0)={0x0, 0x0, 0x10100, 0x2, 0x2, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x9, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc4424b61c9f1b97}}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000001b00)={0xfffffffe, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) dup(r9) 16.113804244s ago: executing program 2 (id=764): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820f", 0x8c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x18) write$binfmt_aout(r2, 0x0, 0x0) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000001200)='syzkaller\x00'}, 0x90) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x6) 13.690028209s ago: executing program 4 (id=783): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x25, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x2, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x16, 0x0, 0x0, 0x76}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.522905507s ago: executing program 4 (id=784): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000000)=[@request_death, @clear_death, @request_death], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) 13.390955598s ago: executing program 4 (id=785): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 12.849159147s ago: executing program 1 (id=788): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10000) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000036000000", 0xfe60) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) r3 = mq_open(&(0x7f0000001500)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa24\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfN\x95g\xc3vU\r\xa7\"\t\x1b\x9f\xf1f\x1foP\xc5\x13\x8fF\xf0\xa4 *n\x8e1\xb5;\xa2\x8b\xc4\xf9\x1a{\xe0\f\xd9\x89\xd2wg \xde78z\"(V0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6820, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0x5dde, &(0x7f0000000640), 0x0, 0x0) socket$inet(0xa, 0x801, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}) syz_io_uring_setup(0x4033, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.645318257s ago: executing program 1 (id=794): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 11.304473923s ago: executing program 1 (id=795): clock_gettime(0xfffffff2, &(0x7f0000000500)) 11.248830815s ago: executing program 1 (id=796): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000a74000/0x1000)=nil, 0x1000) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000200), 0x0) 11.181911163s ago: executing program 0 (id=797): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = dup2(r0, r0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), 0x0, 0x0, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000b45000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil) mremap(&(0x7f000041b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000c67000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 9.601044256s ago: executing program 0 (id=798): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000200)="03", 0xfd48, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="c4", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x20) 7.832226771s ago: executing program 0 (id=799): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000005640)=[{&(0x7f00000000c0)="d1", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)=""/119, 0x77}], 0x1, &(0x7f0000000800)=""/177, 0xb1}}], 0x1, 0x0, 0x0) 7.742785826s ago: executing program 1 (id=800): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400), 0x4) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002940)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="0800050000000000000095ca484b08000300", @ANYRES32=r1, @ANYBLOB="4b00be00e08c495551028c777ca9977a503144a241cf6744a177582b065bca565966525ace87cdbc22c6fc25a2f2919255fdc2810688686951279e415592d9d172c3a9349b6a97222a0c010006001a0104000000", @ANYRESHEX=r3], 0x70}}, 0x4000000) getresgid(&(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01100301090224d70000000000090400000206d3450009050102100000000009058bddb0e4e328159a0a9b9d62cbd05440028c6d35aa80b1505ff982ed4e2fe6a34714adf88080944cab3dc0a5"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}, {0x0, 0x3}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c1}, 0x0) 7.710831936s ago: executing program 0 (id=801): r0 = socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 7.568148082s ago: executing program 0 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x54, 0x1b, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x11, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 5.83639473s ago: executing program 0 (id=803): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xfffffffc}, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.778477729s ago: executing program 4 (id=804): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f00894f1327c9057c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.272841303s ago: executing program 4 (id=805): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) kernel console output (not intermixed with test programs): Mfr=0, Product=0, SerialNumber=105 [ 166.911630][ T45] usb 3-1: SerialNumber: syz [ 166.927574][ T45] usb 3-1: config 0 descriptor?? [ 167.160512][ T45] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 167.167541][ T45] usb 3-1: No valid video chain found. [ 167.189853][ T45] usb 3-1: USB disconnect, device number 8 [ 167.677882][ T7173] netlink: 216 bytes leftover after parsing attributes in process `syz.0.442'. [ 167.938604][ T53] Bluetooth: hci2: command tx timeout [ 168.031392][ T6927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.046913][ T6927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.097010][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.145374][ T6927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.186878][ T6927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.258824][ T53] Bluetooth: hci3: command tx timeout [ 168.269737][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.366891][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 168.467850][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.503583][ T7199] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 168.662855][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.961270][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.984456][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.007164][ T7156] bridge_slave_0: entered allmulticast mode [ 169.024746][ T7156] bridge_slave_0: entered promiscuous mode [ 169.036983][ T7218] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 169.075706][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.093498][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.102152][ T7156] bridge_slave_1: entered allmulticast mode [ 169.109759][ T7156] bridge_slave_1: entered promiscuous mode [ 169.216450][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.320121][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.420616][ T7223] kvm: kvm [7222]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x80 [ 169.454975][ T7156] team0: Port device team_slave_0 added [ 169.509895][ T12] bridge_slave_1: left allmulticast mode [ 169.538916][ T12] bridge_slave_1: left promiscuous mode [ 169.548452][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.561011][ T12] bridge_slave_0: left allmulticast mode [ 169.594749][ T12] bridge_slave_0: left promiscuous mode [ 169.628894][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.749466][ T5146] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.962965][ T5146] usb 3-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024 [ 169.990076][ T5146] usb 3-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 1024 [ 170.009320][ T5146] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.033815][ T5146] usb 3-1: config 1 interface 0 has no altsetting 0 [ 170.046059][ T5146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.062556][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.073279][ T5146] usb 3-1: Product: 잓짺뼿辥緰䪴㴏ȴ㗔湤㔒聆籟袽᣶㻳辚魓唦䲦ꇏ牟ᝒ堳ဦ鐦䰡왷ٮ犔ಱ࿢䢙鱲왤䝁뙚ꎯ࢚槲颗䕪㏠룇␽䕻▟͏遻슒ꛅ仲䔍㥿퀖睕 압㈟굢泳晹搆繗࡙∔裱㔪뼁垷๽暦啄㨬ᜧ捛퇬学烋裛縀骺埒쓨幏栽ᢗ頳妺춬칳֮陛 [ 170.107906][ T5146] usb 3-1: Manufacturer: ณꋿ哥迃ꛘ俙᮰䝣蝆攑Ἒༀﴯ੮뎍꟪厘㩎턷鰦鴏꫆ﾛ帒孡㠊ဖ陡儙耂曲䢴皯㬝훘リ塕ꄡ썓꘡虰ᗢᢡ⺒ᰩ篸컌첈츉℃ϝޒ᠟꛹嘴侩ΰ꠶聬Ꮗ곞碫ꜷ넻蠿ꬵ偡ڸ殱鵁㾼⻰勴駑ꧮǩ맘 [ 170.135735][ T5146] usb 3-1: SerialNumber: 㿳딀삅䍷ꏔﴩ [ 170.147662][ T7233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.155222][ T7233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.326559][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.338115][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.348848][ T53] Bluetooth: hci3: command tx timeout [ 170.356145][ T12] bond0 (unregistering): Released all slaves [ 170.370333][ T7231] netlink: 'syz.2.451': attribute type 10 has an invalid length. [ 170.393520][ T7231] team0: Device hsr_slave_1 failed to register rx_handler [ 170.419633][ T7230] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.451'. [ 170.429580][ T7230] netlink: zone id is out of range [ 170.435441][ T7230] netlink: zone id is out of range [ 170.441426][ T7230] netlink: get zone limit has 8 unknown bytes [ 170.483151][ T7156] team0: Port device team_slave_1 added [ 170.501600][ T5146] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 170.529870][ T5146] usb 3-1: USB disconnect, device number 9 [ 170.724135][ T6996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.766324][ T6996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.782715][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.790979][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.821225][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.862206][ T6996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.875655][ T6996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.886300][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.894372][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.922963][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.083070][ T7156] hsr_slave_0: entered promiscuous mode [ 171.105651][ T7156] hsr_slave_1: entered promiscuous mode [ 171.129257][ T7156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.136854][ T7156] Cannot create hsr debugfs directory [ 171.231872][ T7263] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.457'. [ 171.270725][ T7263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.356230][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.393141][ T12] hsr_slave_0: left promiscuous mode [ 171.406570][ T12] hsr_slave_1: left promiscuous mode [ 171.416906][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.429756][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.444813][ T7270] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.457566][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.480183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.533444][ T12] veth0_macvtap: left promiscuous mode [ 171.549186][ T12] veth1_vlan: left promiscuous mode [ 171.554678][ T12] veth0_vlan: left promiscuous mode [ 171.971762][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 172.075648][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.149298][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.193645][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.211801][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 172.222902][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1196, setting to 1024 [ 172.234685][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.251731][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.261450][ T8] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.269885][ T8] usb 1-1: Manufacturer: syz [ 172.279514][ T8] usb 1-1: config 0 descriptor?? [ 172.285978][ T7268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.419057][ T53] Bluetooth: hci3: command tx timeout [ 172.711330][ T8] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 172.716922][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.752225][ T8] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 172.770799][ T8] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 172.863472][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.870684][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.937547][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.944752][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.271616][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.327183][ T6927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.369039][ T45] usb 1-1: USB disconnect, device number 8 [ 173.389117][ T6927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.520370][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.532098][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.625623][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.632812][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.699607][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.706820][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.775293][ T6927] veth0_vlan: entered promiscuous mode [ 173.783200][ T7156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.857362][ T6927] veth1_vlan: entered promiscuous mode [ 173.864594][ T7156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.899955][ T7156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.924020][ T7156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.036359][ T6927] veth0_macvtap: entered promiscuous mode [ 174.071214][ T6927] veth1_macvtap: entered promiscuous mode [ 174.157819][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.209982][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.221385][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.233960][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.247106][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.258812][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.269025][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.293780][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.305913][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.317531][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.328611][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.343966][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.400628][ T6927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.419493][ T6927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.444987][ T6927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.456313][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 174.463382][ T6927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.476947][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.499423][ T53] Bluetooth: hci3: command tx timeout [ 174.507646][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 174.518932][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 174.527128][ T8] usb 3-1: SerialNumber: syz [ 174.536053][ T8] usb 3-1: config 0 descriptor?? [ 174.725749][ T6996] veth0_vlan: entered promiscuous mode [ 174.743930][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.749314][ T8] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 174.783949][ T8] usb 3-1: No valid video chain found. [ 174.801898][ T8] usb 3-1: USB disconnect, device number 10 [ 174.854512][ T6996] veth1_vlan: entered promiscuous mode [ 174.902984][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.931067][ T2936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.967156][ T2936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.998205][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.005421][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.068387][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.075609][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.092196][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.105135][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.142061][ T6996] veth0_macvtap: entered promiscuous mode [ 175.216640][ T6996] veth1_macvtap: entered promiscuous mode [ 175.324442][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.358175][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.371065][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.384198][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.394126][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.404686][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.415966][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.470103][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.490813][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.501628][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.512501][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.522521][ T5143] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.530393][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.541273][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.552907][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.590939][ T6996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.607176][ T6996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.645817][ T6996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.666328][ T6996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.699002][ T5143] usb 1-1: Using ep0 maxpacket: 8 [ 175.711029][ T5143] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.746196][ T5143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.809197][ T5143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.825392][ T7350] netlink: 76 bytes leftover after parsing attributes in process `syz.2.470'. [ 175.829284][ T5143] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.856707][ T5143] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.868184][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.890025][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.108582][ T5143] usb 1-1: GET_CAPABILITIES returned 0 [ 176.120591][ T5143] usbtmc 1-1:16.0: can't read capabilities [ 176.121412][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.154798][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.239434][ T7156] veth0_vlan: entered promiscuous mode [ 176.276097][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.293404][ T7156] veth1_vlan: entered promiscuous mode [ 176.296287][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.467240][ T7156] veth0_macvtap: entered promiscuous mode [ 176.514438][ T7156] veth1_macvtap: entered promiscuous mode [ 176.622167][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.651528][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.660674][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.669770][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.678861][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.690567][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.700493][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.711214][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.721081][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.738655][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.751037][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.758867][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.762574][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.770496][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.770537][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.782670][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.789332][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.789438][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.843825][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.852946][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.862025][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.871094][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 176.971779][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.002315][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 177.011423][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 177.020506][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 177.029562][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.035941][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.045807][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.056355][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.068354][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.081176][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.093107][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.099137][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 177.104569][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.124352][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.132162][ T9] usb 1-1: USB disconnect, device number 9 [ 177.221820][ T7156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.246695][ T7156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.270599][ T7156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.285867][ T7156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.373002][ T7390] (unnamed net_device) (uninitialized): (slave veth0_to_bridge): Device is not bonding slave [ 177.405882][ T7390] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0_to_bridge) [ 177.626441][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.659195][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.673903][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 177.736890][ T29] audit: type=1326 audit(1720151442.473:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.2.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x0 [ 177.741147][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.758675][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.782509][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.907054][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.076629][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.224971][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.335010][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.564804][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.574613][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.583348][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.599018][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.613607][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.625611][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.851337][ T51] bridge_slave_1: left allmulticast mode [ 178.857069][ T51] bridge_slave_1: left promiscuous mode [ 178.886229][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.932667][ T51] bridge_slave_0: left allmulticast mode [ 178.952068][ T51] bridge_slave_0: left promiscuous mode [ 178.957899][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.468510][ T29] audit: type=1326 audit(1720151444.203:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.3.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bb2b75bd9 code=0x0 [ 179.958562][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.973796][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.983925][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.000529][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.010783][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.018210][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.094089][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'. [ 180.169830][ T7462] kAFS: unable to lookup cell '.,' [ 180.202924][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.239764][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.255646][ T51] bond0 (unregistering): Released all slaves [ 180.499972][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 180.738653][ T5096] Bluetooth: hci4: command tx timeout [ 181.057784][ T51] hsr_slave_0: left promiscuous mode [ 181.065200][ T51] hsr_slave_1: left promiscuous mode [ 181.084544][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.098470][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.112685][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.122884][ T5437] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.138023][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.205909][ T51] veth1_macvtap: left promiscuous mode [ 181.231643][ T51] veth0_macvtap: left promiscuous mode [ 181.237428][ T51] veth1_vlan: left promiscuous mode [ 181.287182][ T51] veth0_vlan: left promiscuous mode [ 181.355101][ T5437] usb 1-1: Using ep0 maxpacket: 16 [ 181.365444][ T5437] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 181.409829][ T5437] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.422740][ T5437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.445512][ T5437] usb 1-1: SerialNumber: syz [ 181.482825][ T5437] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 181.506690][ T5437] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 181.534571][ T5437] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 181.709354][ T5437] usb 1-1: USB disconnect, device number 10 [ 182.099088][ T5096] Bluetooth: hci3: command tx timeout [ 182.181505][ T7505] program syz.3.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.196742][ T7505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 182.396491][ T51] team0 (unregistering): Port device team_slave_1 removed [ 182.468076][ T51] team0 (unregistering): Port device team_slave_0 removed [ 182.819348][ T5096] Bluetooth: hci4: command tx timeout [ 183.478202][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 183.826514][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 183.898846][ T5437] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 183.909868][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 184.128517][ T5437] usb 3-1: Using ep0 maxpacket: 16 [ 184.136415][ T5437] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 184.151595][ T5437] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.161172][ T5437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.179405][ T5096] Bluetooth: hci3: command tx timeout [ 184.196435][ T5437] usb 3-1: SerialNumber: syz [ 184.207443][ T5437] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 184.216627][ T5437] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 184.224406][ T5437] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 184.453507][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.489567][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.536166][ T7459] bridge_slave_0: entered allmulticast mode [ 184.564152][ T7459] bridge_slave_0: entered promiscuous mode [ 184.720401][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.766866][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.775085][ T7420] bridge_slave_0: entered allmulticast mode [ 184.785843][ T7420] bridge_slave_0: entered promiscuous mode [ 184.804258][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.829367][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.836651][ T7459] bridge_slave_1: entered allmulticast mode [ 184.866959][ T7459] bridge_slave_1: entered promiscuous mode [ 184.897396][ T5143] usb 3-1: USB disconnect, device number 11 [ 184.909173][ T5096] Bluetooth: hci4: command tx timeout [ 184.999469][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.006659][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.025547][ T7420] bridge_slave_1: entered allmulticast mode [ 185.033213][ T7420] bridge_slave_1: entered promiscuous mode [ 185.166689][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.206369][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.271509][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.435837][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.499361][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.581219][ T7459] team0: Port device team_slave_0 added [ 185.641310][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.799433][ T7420] team0: Port device team_slave_0 added [ 185.825393][ T7459] team0: Port device team_slave_1 added [ 185.931953][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.982609][ T7420] team0: Port device team_slave_1 added [ 186.263534][ T5096] Bluetooth: hci3: command tx timeout [ 186.308386][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.426608][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.462853][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.517199][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.537628][ T29] audit: type=1326 audit(1720151451.273:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce8d75bd9 code=0x0 [ 186.541780][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.559193][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.581981][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.631433][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.703617][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.710995][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.744287][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.804412][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.813659][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.840158][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.959021][ T7420] hsr_slave_0: entered promiscuous mode [ 186.970623][ T7420] hsr_slave_1: entered promiscuous mode [ 186.988943][ T5096] Bluetooth: hci4: command tx timeout [ 187.259811][ T7459] hsr_slave_0: entered promiscuous mode [ 187.279096][ T7459] hsr_slave_1: entered promiscuous mode [ 187.330526][ T7459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.347332][ T7459] Cannot create hsr debugfs directory [ 187.576257][ T51] bridge_slave_1: left allmulticast mode [ 187.595264][ T51] bridge_slave_1: left promiscuous mode [ 187.658946][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.719965][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'. [ 187.738118][ T51] bridge_slave_0: left allmulticast mode [ 187.743067][ T7632] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 187.763602][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 187.763941][ T51] bridge_slave_0: left promiscuous mode [ 187.779830][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.048784][ T5149] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.251354][ T5149] usb 3-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1024 [ 188.280164][ T5149] usb 3-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 1024 [ 188.302336][ T5149] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.338895][ T5096] Bluetooth: hci3: command tx timeout [ 188.348471][ T5149] usb 3-1: config 1 interface 0 has no altsetting 0 [ 188.375684][ T5149] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.386567][ T5096] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 188.394381][ T5149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.394408][ T5149] usb 3-1: Product: 잓짺뼿辥緰䪴㴏ȴ㗔湤㔒聆籟袽᣶㻳辚魓唦䲦ꇏ牟ᝒ堳ဦ鐦䰡왷ٮ犔ಱ࿢䢙鱲왤䝁뙚ꎯ࢚槲颗䕪㏠룇␽䕻▟͏遻슒ꛅ仲䔍㥿퀖睕 압㈟굢泳晹搆繗࡙∔裱㔪뼁垷๽暦啄㨬ᜧ捛퇬学烋裛縀骺埒쓨幏栽ᢗ頳妺춬칳֮陛 [ 188.394438][ T5149] usb 3-1: Manufacturer: ณꋿ哥迃ꛘ俙᮰䝣蝆攑Ἒༀﴯ੮뎍꟪厘㩎턷鰦鴏꫆ﾛ帒孡㠊ဖ陡儙耂曲䢴皯㬝훘リ塕ꄡ썓꘡虰ᗢᢡ⺒ᰩ篸컌첈츉℃ϝޒ᠟꛹嘴侩ΰ꠶聬Ꮗ곞碫ꜷ넻蠿ꬵ偡ڸ殱鵁㾼⻰勴駑ꧮǩ맘 [ 188.394465][ T5149] usb 3-1: SerialNumber: 㿳딀삅䍷ꏔﴩ [ 188.434972][ T7633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.435135][ T7633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.725942][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.750267][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.774143][ T51] bond0 (unregistering): Released all slaves [ 188.803400][ T7629] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.545'. [ 188.841471][ T7629] netlink: zone id is out of range [ 188.866070][ T7629] netlink: zone id is out of range [ 188.882857][ T7629] netlink: get zone limit has 8 unknown bytes [ 188.917395][ T7631] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 188.944232][ T7631] team0: Device hsr_slave_1 failed to register rx_handler [ 189.021192][ T5149] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 189.061440][ T5149] usb 3-1: USB disconnect, device number 12 [ 190.039573][ T51] hsr_slave_0: left promiscuous mode [ 190.075218][ T51] hsr_slave_1: left promiscuous mode [ 190.085571][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 190.096033][ T7671] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 190.106883][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.120000][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.128049][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 190.146128][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.164900][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.257070][ T51] veth1_macvtap: left promiscuous mode [ 190.271882][ T51] veth0_macvtap: left promiscuous mode [ 190.289645][ T51] veth1_vlan: left promiscuous mode [ 190.304315][ T51] veth0_vlan: left promiscuous mode [ 190.634170][ T7683] program syz.2.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.954897][ T29] audit: type=1326 audit(1720151455.693:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7686 comm="syz.0.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce8d75bd9 code=0x0 [ 191.327644][ T51] team0 (unregistering): Port device team_slave_1 removed [ 191.409366][ T51] team0 (unregistering): Port device team_slave_0 removed [ 191.458159][ T7698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.758745][ T5144] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.984683][ T5144] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.007597][ T5144] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.019436][ T5144] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.029461][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.069423][ T5144] usb 3-1: invalid MIDI out EP 0 [ 192.246192][ T5144] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 192.288873][ T5144] usb 3-1: USB disconnect, device number 13 [ 192.540988][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.715263][ T7420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.778218][ T7420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.874979][ T7420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.893531][ T7420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.223222][ T7459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.262614][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.271574][ T7459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.294211][ T7459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.325483][ T7459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.379562][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.419968][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.427215][ T5437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.475858][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.483042][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.575491][ T7722] netlink: 324 bytes leftover after parsing attributes in process `syz.2.574'. [ 193.699961][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.811227][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.847725][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.948742][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.955931][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.063986][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.071184][ T5440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.275617][ T7459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.366307][ T7420] veth0_vlan: entered promiscuous mode [ 194.418189][ T7420] veth1_vlan: entered promiscuous mode [ 194.484665][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.557406][ T7420] veth0_macvtap: entered promiscuous mode [ 194.581817][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.591411][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.617640][ T7420] veth1_macvtap: entered promiscuous mode [ 194.761800][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.794877][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.848688][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.876942][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.900882][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.915838][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.944621][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.973874][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.020717][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.037346][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.049702][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.062468][ T7420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.076872][ T7420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.101820][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.128988][ T5149] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.177259][ T7459] veth0_vlan: entered promiscuous mode [ 195.195639][ T7420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.255133][ T7420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.275154][ T7420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.299241][ T7420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.340451][ T5149] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 195.371376][ T7459] veth1_vlan: entered promiscuous mode [ 195.377049][ T5149] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.424656][ T5149] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 195.460584][ T5149] usb 3-1: string descriptor 0 read error: -22 [ 195.482007][ T5149] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.516143][ T5149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.564837][ T7756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.592916][ T5149] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 195.725701][ T7459] veth0_macvtap: entered promiscuous mode [ 195.781149][ T7459] veth1_macvtap: entered promiscuous mode [ 195.826774][ T45] usb 3-1: USB disconnect, device number 14 [ 195.864008][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.895207][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.901619][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.939972][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.953592][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.964318][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.985031][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.028819][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.056733][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.077739][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.109707][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.150128][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.168467][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.189338][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.222413][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.242920][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.264331][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.288488][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.309435][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.332811][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.395741][ T7459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.416101][ T7459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.439429][ T7459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.458768][ T7459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.502161][ T2884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.550525][ T2884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.675113][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.715337][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.793538][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.804723][ T7795] syz.1.483 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 196.815602][ T5437] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.831311][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.031269][ T5437] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 197.058843][ T5437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.102013][ T5437] usb 3-1: config 0 descriptor?? [ 197.125516][ T5437] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 197.148878][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 197.228957][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 197.435220][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.466360][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 197.487812][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.510514][ T45] usb 5-1: config 0 descriptor?? [ 197.537856][ T45] smsusb:smsusb_probe: board id=8, interface number 0 [ 197.563224][ T45] smsusb:smsusb_probe: Device initialized with return code -19 [ 197.848610][ T45] usb 5-1: USB disconnect, device number 8 [ 197.986013][ T5437] gspca_cpia1: usb_control_msg 02, error -71 [ 197.997840][ T5437] gspca_cpia1: usb_control_msg 05, error -71 [ 198.014510][ T5437] gspca_cpia1: usb_control_msg 04, error -71 [ 198.032395][ T5437] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 198.043317][ T5149] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 198.048101][ T5437] usb 3-1: USB disconnect, device number 15 [ 198.128653][ T5146] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.250486][ T5149] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.262364][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 198.286191][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1196, setting to 1024 [ 198.301954][ T5149] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.331441][ T5149] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.335687][ T5146] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.348716][ T5149] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.373393][ T5146] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.379305][ T5149] usb 1-1: Manufacturer: syz [ 198.385514][ T5146] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.399268][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.423163][ T5149] usb 1-1: config 0 descriptor?? [ 198.423799][ T7825] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 198.436548][ T7819] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 198.700097][ T7848] xt_cgroup: invalid path, errno=-2 [ 198.923213][ T5149] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 198.963879][ T5149] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 199.013707][ T5149] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 199.035866][ T5143] usb 2-1: USB disconnect, device number 9 [ 199.625586][ T5146] usb 1-1: USB disconnect, device number 11 [ 199.781635][ T7892] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.827942][ T5143] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 200.884349][ T29] audit: type=1326 audit(1720151465.623:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.0.618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce8d75bd9 code=0x0 [ 201.043455][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 201.079121][ T5143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.117054][ T5143] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.145092][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.182171][ T5143] usb 3-1: config 0 descriptor?? [ 201.198879][ T7919] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.631763][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.674894][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.731155][ T5143] usbhid 3-1:0.0: can't add hid device: -71 [ 201.747308][ T5143] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.785214][ T5143] usb 3-1: USB disconnect, device number 16 [ 202.040115][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.165629][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.259412][ T5093] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 202.326765][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.408855][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.426791][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.437378][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.447034][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.460831][ T5093] usb 2-1: Using ep0 maxpacket: 16 [ 202.481074][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.499431][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.508305][ T5093] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 202.524255][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.534637][ T5093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.542751][ T5093] usb 2-1: Product: syz [ 202.546938][ T5093] usb 2-1: Manufacturer: syz [ 202.552661][ T5093] usb 2-1: SerialNumber: syz [ 202.560627][ T5093] usb 2-1: config 0 descriptor?? [ 202.571180][ T5093] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 202.577665][ T5093] pctv452e: pctv452e_power_ctrl: 1 [ 202.577665][ T5093] [ 202.588561][ T5093] usb 2-1: selecting invalid altsetting 3 [ 202.594687][ T5093] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 202.594687][ T5093] [ 202.616234][ T5093] dvb-usb: bulk message failed: -22 (5/0) [ 202.643769][ T5093] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.684382][ T5093] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 202.698620][ T5093] usb 2-1: media controller created [ 202.785734][ T5093] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.022465][ T61] bridge_slave_1: left allmulticast mode [ 203.028158][ T61] bridge_slave_1: left promiscuous mode [ 203.040508][ T5093] DVB: Unable to find symbol stb0899_attach() [ 203.042514][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.046589][ T5093] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 203.120412][ T61] bridge_slave_0: left allmulticast mode [ 203.126096][ T61] bridge_slave_0: left promiscuous mode [ 203.144887][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.310708][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.323173][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.331523][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.338504][ T5093] rc_core: IR keymap rc-dib0700-rc5 not found [ 203.344772][ T5093] Registered IR keymap rc-empty [ 203.354603][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.356241][ T5093] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 203.380342][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.389259][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.425929][ T5093] input: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 203.444191][ T5093] dvb-usb: schedule remote query interval to 100 msecs. [ 203.451654][ T5093] pctv452e: pctv452e_power_ctrl: 0 [ 203.451654][ T5093] [ 203.466733][ T5093] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 203.569461][ T5149] dvb-usb: bulk message failed: -22 (4/0) [ 203.575500][ T5149] dvb-usb: error -22 while querying for an remote control event. [ 203.729224][ T5149] dvb-usb: bulk message failed: -22 (4/0) [ 203.735015][ T5149] dvb-usb: error -22 while querying for an remote control event. [ 203.849654][ T5149] dvb-usb: bulk message failed: -22 (4/0) [ 203.855449][ T5149] dvb-usb: error -22 while querying for an remote control event. [ 203.959548][ T5149] usb 2-1: USB disconnect, device number 10 [ 204.066228][ T5149] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 204.283966][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.296577][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.312924][ T61] bond0 (unregistering): Released all slaves [ 204.327021][ T7996] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 204.578740][ T53] Bluetooth: hci1: command tx timeout [ 204.727060][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 204.748712][ T5149] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 204.868991][ T53] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 204.956490][ T8035] xt_cgroup: invalid path, errno=-2 [ 204.965680][ T5149] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 204.991356][ T5149] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.018516][ T5149] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.050595][ T5149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.090742][ T5149] usb 5-1: config 0 descriptor?? [ 205.096734][ T8018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.188280][ T61] hsr_slave_0: left promiscuous mode [ 205.199820][ T61] hsr_slave_1: left promiscuous mode [ 205.219050][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.242940][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.259637][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.268306][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.307843][ T61] veth1_macvtap: left promiscuous mode [ 205.315112][ T61] veth0_macvtap: left promiscuous mode [ 205.329782][ T61] veth1_vlan: left promiscuous mode [ 205.337224][ T61] veth0_vlan: left promiscuous mode [ 205.461063][ T53] Bluetooth: hci2: command tx timeout [ 205.556370][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.569029][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.596201][ T5149] usbhid 5-1:0.0: can't add hid device: -71 [ 205.613101][ T5149] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.634437][ T5149] usb 5-1: USB disconnect, device number 9 [ 205.763588][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.781550][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.795764][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.809116][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.822279][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.836640][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.123291][ T61] team0 (unregistering): Port device team_slave_1 removed [ 206.162152][ T61] team0 (unregistering): Port device team_slave_0 removed [ 206.359284][ T8054] sock: sock_timestamping_bind_phc: sock not bind to device [ 206.661744][ T53] Bluetooth: hci1: command tx timeout [ 206.667892][ T8050] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 206.712014][ T8056] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 206.811517][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.818946][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.826293][ T7972] bridge_slave_0: entered allmulticast mode [ 206.833584][ T7972] bridge_slave_0: entered promiscuous mode [ 206.892398][ T8001] chnl_net:caif_netlink_parms(): no params data found [ 206.928774][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.935909][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.946269][ T7972] bridge_slave_1: entered allmulticast mode [ 206.956499][ T7972] bridge_slave_1: entered promiscuous mode [ 207.177890][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.191301][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.254817][ T7972] team0: Port device team_slave_0 added [ 207.266351][ T7972] team0: Port device team_slave_1 added [ 207.358965][ T5146] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.378516][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.387754][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.436574][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.516116][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.530817][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.540993][ T53] Bluetooth: hci2: command tx timeout [ 207.559203][ T5146] usb 5-1: Using ep0 maxpacket: 16 [ 207.591168][ T5146] usb 5-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 207.613822][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.632646][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.646319][ T5146] usb 5-1: Product: syz [ 207.659431][ T5146] usb 5-1: Manufacturer: syz [ 207.664447][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.694623][ T5146] usb 5-1: SerialNumber: syz [ 207.705832][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.725375][ T5146] usb 5-1: config 0 descriptor?? [ 207.738733][ T8001] bridge_slave_0: entered allmulticast mode [ 207.747844][ T5146] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 207.762220][ T8001] bridge_slave_0: entered promiscuous mode [ 207.770420][ T5146] pctv452e: pctv452e_power_ctrl: 1 [ 207.770420][ T5146] [ 207.782750][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.794549][ T5146] usb 5-1: selecting invalid altsetting 3 [ 207.809900][ T5146] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 207.809900][ T5146] [ 207.825862][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.834631][ T8001] bridge_slave_1: entered allmulticast mode [ 207.846234][ T5146] dvb-usb: bulk message failed: -22 (5/0) [ 207.854722][ T8001] bridge_slave_1: entered promiscuous mode [ 207.872857][ T5146] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.893261][ T5146] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 207.907989][ T5146] usb 5-1: media controller created [ 207.938751][ T53] Bluetooth: hci4: command tx timeout [ 207.941463][ T5146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.154561][ T7972] hsr_slave_0: entered promiscuous mode [ 208.191922][ T7972] hsr_slave_1: entered promiscuous mode [ 208.199449][ T5146] DVB: Unable to find symbol stb0899_attach() [ 208.205562][ T5146] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 208.238816][ T7972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.246421][ T7972] Cannot create hsr debugfs directory [ 208.312508][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.321991][ T5146] rc_core: IR keymap rc-dib0700-rc5 not found [ 208.328087][ T5146] Registered IR keymap rc-empty [ 208.342573][ T5146] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 208.372105][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.386856][ T5146] input: PCTV HDTV USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 208.411667][ T5146] dvb-usb: schedule remote query interval to 100 msecs. [ 208.419623][ T5146] pctv452e: pctv452e_power_ctrl: 0 [ 208.419623][ T5146] [ 208.431591][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 208.447167][ T5146] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 208.528834][ T5146] dvb-usb: bulk message failed: -22 (4/0) [ 208.535729][ T5146] dvb-usb: error -22 while querying for an remote control event. [ 208.650272][ T5146] dvb-usb: bulk message failed: -22 (4/0) [ 208.656056][ T5146] dvb-usb: error -22 while querying for an remote control event. [ 208.710290][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 208.739335][ T53] Bluetooth: hci1: command tx timeout [ 208.751176][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.778887][ T5146] dvb-usb: bulk message failed: -22 (4/0) [ 208.784670][ T5146] dvb-usb: error -22 while querying for an remote control event. [ 208.812309][ T8001] team0: Port device team_slave_0 added [ 208.817415][ T5093] usb 5-1: USB disconnect, device number 10 [ 208.884916][ T5093] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 208.898761][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 208.906867][ T45] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 208.920414][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.932500][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=dd.3f [ 208.939432][ T8001] team0: Port device team_slave_1 added [ 208.941914][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.965234][ T45] usb 3-1: Product: syz [ 208.971490][ T45] usb 3-1: Manufacturer: syz [ 208.976138][ T45] usb 3-1: SerialNumber: syz [ 208.999535][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.044827][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.054863][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.083492][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.142025][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.155386][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.163809][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.190788][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.226803][ T45] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 209.262082][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.280964][ T45] usb 3-1: USB disconnect, device number 17 [ 209.347053][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.391452][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.398842][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.406161][ T8052] bridge_slave_0: entered allmulticast mode [ 209.415932][ T8052] bridge_slave_0: entered promiscuous mode [ 209.430860][ T8001] hsr_slave_0: entered promiscuous mode [ 209.444234][ T8001] hsr_slave_1: entered promiscuous mode [ 209.450876][ T8001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.468575][ T8001] Cannot create hsr debugfs directory [ 209.507066][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.523263][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.524608][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.553868][ T8052] bridge_slave_1: entered allmulticast mode [ 209.570835][ T8052] bridge_slave_1: entered promiscuous mode [ 209.618625][ T53] Bluetooth: hci2: command tx timeout [ 209.709021][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.725369][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.847442][ T8113] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 209.888879][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 209.965544][ T8052] team0: Port device team_slave_0 added [ 210.008314][ T8113] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 210.019283][ T53] Bluetooth: hci4: command tx timeout [ 210.027077][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 210.050205][ T8052] team0: Port device team_slave_1 added [ 210.516712][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.531835][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.547655][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.560452][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.572192][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.587155][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.596583][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.604775][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.614977][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.649316][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.708667][ T5146] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 210.726201][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.737537][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.766165][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.818907][ T5096] Bluetooth: hci1: command tx timeout [ 210.828065][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.888653][ T5146] usb 3-1: Using ep0 maxpacket: 16 [ 210.896056][ T5146] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 210.911650][ T5146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.920815][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.929008][ T5146] usb 3-1: SerialNumber: syz [ 210.947029][ T5146] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 210.957084][ T5146] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 210.968259][ T5146] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 211.021259][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.092685][ T8052] hsr_slave_0: entered promiscuous mode [ 211.100659][ T8052] hsr_slave_1: entered promiscuous mode [ 211.107131][ T8052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.115764][ T8052] Cannot create hsr debugfs directory [ 211.144701][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.343917][ T7972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.367975][ T45] usb 3-1: USB disconnect, device number 18 [ 211.425865][ T7972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.437788][ T7972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.470958][ T7972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.687778][ T61] bridge_slave_1: left allmulticast mode [ 211.694388][ T61] bridge_slave_1: left promiscuous mode [ 211.701783][ T5096] Bluetooth: hci2: command tx timeout [ 211.707608][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.720531][ T61] bridge_slave_0: left allmulticast mode [ 211.726392][ T61] bridge_slave_0: left promiscuous mode [ 211.732394][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.742759][ T61] bridge_slave_1: left allmulticast mode [ 211.749097][ T61] bridge_slave_1: left promiscuous mode [ 211.754857][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.766303][ T61] bridge_slave_0: left allmulticast mode [ 211.772252][ T61] bridge_slave_0: left promiscuous mode [ 211.777984][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.098845][ T5096] Bluetooth: hci4: command tx timeout [ 212.425867][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.441217][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.453337][ T61] bond0 (unregistering): Released all slaves [ 212.458696][ T1146] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 212.548183][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.564867][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.575359][ T61] bond0 (unregistering): Released all slaves [ 212.633508][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 212.663544][ T5096] Bluetooth: hci3: command tx timeout [ 212.678851][ T1146] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 212.693861][ T1146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.722484][ T1146] usb 3-1: config 0 descriptor?? [ 212.737315][ T1146] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 213.007493][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.025224][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.039690][ T8129] bridge_slave_0: entered allmulticast mode [ 213.047730][ T8129] bridge_slave_0: entered promiscuous mode [ 213.074356][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.123560][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.133134][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.141592][ T8129] bridge_slave_1: entered allmulticast mode [ 213.167849][ T8129] bridge_slave_1: entered promiscuous mode [ 213.315544][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.345246][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.498476][ T8129] team0: Port device team_slave_0 added [ 213.521589][ T61] hsr_slave_0: left promiscuous mode [ 213.536388][ T61] hsr_slave_1: left promiscuous mode [ 213.543867][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.559114][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.577642][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.587487][ T1146] gspca_cpia1: usb_control_msg 02, error -71 [ 213.594178][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.602167][ T1146] gspca_cpia1: usb_control_msg 05, error -71 [ 213.608847][ T1146] gspca_cpia1: usb_control_msg 04, error -71 [ 213.614931][ T1146] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 213.632869][ T61] hsr_slave_0: left promiscuous mode [ 213.641510][ T1146] usb 3-1: USB disconnect, device number 19 [ 213.649346][ T61] hsr_slave_1: left promiscuous mode [ 213.658157][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.666176][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.697328][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.705042][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.737502][ T61] veth1_macvtap: left promiscuous mode [ 213.743216][ T61] veth0_macvtap: left promiscuous mode [ 213.748982][ T61] veth1_vlan: left promiscuous mode [ 213.754485][ T61] veth0_vlan: left promiscuous mode [ 213.761028][ T61] veth1_macvtap: left promiscuous mode [ 213.766542][ T61] veth0_macvtap: left promiscuous mode [ 213.772946][ T61] veth1_vlan: left promiscuous mode [ 213.778232][ T61] veth0_vlan: left promiscuous mode [ 214.189015][ T5096] Bluetooth: hci4: command tx timeout [ 214.445222][ T61] team0 (unregistering): Port device team_slave_1 removed [ 214.515941][ T61] team0 (unregistering): Port device team_slave_0 removed [ 214.746447][ T5096] Bluetooth: hci3: command tx timeout [ 214.858515][ T1146] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 215.076033][ T1146] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.088043][ T1146] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 215.101274][ T1146] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.110892][ T1146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.163643][ T1146] usb 3-1: invalid MIDI out EP 0 [ 215.299640][ T1146] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 215.377122][ T5423] udevd[5423]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.564202][ T1146] usb 3-1: USB disconnect, device number 20 [ 215.829723][ T61] team0 (unregistering): Port device team_slave_1 removed [ 215.862666][ T61] team0 (unregistering): Port device team_slave_0 removed [ 216.277928][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.289056][ T8129] team0: Port device team_slave_1 added [ 216.362619][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.374369][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.419199][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.432485][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.453785][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.481285][ T8129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.519355][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.526499][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.530141][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 216.576597][ T8001] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.609143][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.616293][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.772027][ T8001] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.804684][ T8129] hsr_slave_0: entered promiscuous mode [ 216.819349][ T5096] Bluetooth: hci3: command tx timeout [ 216.843210][ T8129] hsr_slave_1: entered promiscuous mode [ 216.899125][ T8001] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.056947][ T8001] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.143340][ T29] audit: type=1326 audit(1720151481.883:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.198524][ T29] audit: type=1326 audit(1720151481.913:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.292625][ T29] audit: type=1326 audit(1720151481.913:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.334305][ T29] audit: type=1326 audit(1720151481.913:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.411124][ T29] audit: type=1326 audit(1720151481.913:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.469219][ T29] audit: type=1326 audit(1720151481.913:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.493573][ T29] audit: type=1326 audit(1720151481.923:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.545119][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.573144][ T29] audit: type=1326 audit(1720151481.923:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.612221][ T29] audit: type=1326 audit(1720151481.923:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.660723][ T29] audit: type=1326 audit(1720151481.923:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.2.673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f35575bd9 code=0x7ffc0000 [ 217.688502][ T8052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.702513][ T8052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.715894][ T8176] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.673'. [ 217.749686][ T8176] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 217.773323][ T8129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.841243][ T8052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.883082][ T8052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.952344][ T8129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.063535][ T8129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.097716][ T7972] veth0_vlan: entered promiscuous mode [ 218.177587][ T8129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.234202][ T7972] veth1_vlan: entered promiscuous mode [ 218.371306][ T2884] bridge_slave_1: left allmulticast mode [ 218.377007][ T2884] bridge_slave_1: left promiscuous mode [ 218.400028][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.411186][ T2884] bridge_slave_0: left allmulticast mode [ 218.416863][ T2884] bridge_slave_0: left promiscuous mode [ 218.422710][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.899725][ T5096] Bluetooth: hci3: command tx timeout [ 219.000468][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.011463][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.024209][ T2884] bond0 (unregistering): Released all slaves [ 219.050029][ T7972] veth0_macvtap: entered promiscuous mode [ 219.112932][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.213993][ T7972] veth1_macvtap: entered promiscuous mode [ 219.274186][ T8129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.304253][ T8129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.351411][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.373529][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.384233][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.394979][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.406164][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.425950][ T8129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.436673][ T8129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.488827][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.500187][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.511211][ T7972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.522001][ T7972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.533651][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.548148][ T7972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.558197][ T7972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.567928][ T7972] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.577015][ T7972] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.594226][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.684374][ T2884] hsr_slave_0: left promiscuous mode [ 219.690515][ T2884] hsr_slave_1: left promiscuous mode [ 219.696329][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.704274][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.713136][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.721037][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.738844][ T2884] veth1_macvtap: left promiscuous mode [ 219.744398][ T2884] veth0_macvtap: left promiscuous mode [ 219.750353][ T2884] veth1_vlan: left promiscuous mode [ 219.755619][ T2884] veth0_vlan: left promiscuous mode [ 220.279561][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.288887][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.305223][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.318029][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.331970][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.341539][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 220.354001][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.393783][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 220.774855][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.781997][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.795653][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.802843][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.943538][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.006588][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.096198][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.106858][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.150865][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.157955][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.226125][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.233418][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.396518][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.415510][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.445944][ T8052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.505054][ T8129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.533850][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.764081][ T2884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.908235][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.970459][ T2884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.113773][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.120971][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.157337][ T2884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.210799][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.218748][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.309512][ T2884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.350412][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.366671][ T8227] chnl_net:caif_netlink_parms(): no params data found [ 222.419127][ T53] Bluetooth: hci0: command tx timeout [ 222.483354][ T8001] veth0_vlan: entered promiscuous mode [ 222.515898][ T8001] veth1_vlan: entered promiscuous mode [ 222.757498][ T8286] mmap: syz.0.685 (8286) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 222.904404][ T8284] kvm: user requested TSC rate below hardware speed [ 222.965140][ T8052] veth0_vlan: entered promiscuous mode [ 222.980091][ T2884] bridge_slave_1: left allmulticast mode [ 222.985791][ T2884] bridge_slave_1: left promiscuous mode [ 222.992731][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.003043][ T2884] bridge_slave_0: left allmulticast mode [ 223.009345][ T2884] bridge_slave_0: left promiscuous mode [ 223.015003][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.313043][ T2884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.326474][ T2884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.337604][ T2884] bond0 (unregistering): Released all slaves [ 223.349911][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.368938][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.376131][ T8227] bridge_slave_0: entered allmulticast mode [ 223.386535][ T8227] bridge_slave_0: entered promiscuous mode [ 223.404215][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.420002][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.438699][ T8227] bridge_slave_1: entered allmulticast mode [ 223.446051][ T8227] bridge_slave_1: entered promiscuous mode [ 223.483685][ T8001] veth0_macvtap: entered promiscuous mode [ 223.503560][ T8001] veth1_macvtap: entered promiscuous mode [ 223.573260][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.587039][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.607786][ T8052] veth1_vlan: entered promiscuous mode [ 223.673885][ T8227] team0: Port device team_slave_0 added [ 223.715504][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.728770][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.740273][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.750932][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.763990][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.774227][ T8227] team0: Port device team_slave_1 added [ 223.808619][ T5144] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.844305][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.855141][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.866477][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.877295][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.888276][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.903834][ T2884] hsr_slave_0: left promiscuous mode [ 223.910332][ T2884] hsr_slave_1: left promiscuous mode [ 223.916218][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.925713][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.933830][ T2884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.941611][ T2884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.961876][ T2884] veth1_macvtap: left promiscuous mode [ 223.967598][ T2884] veth0_macvtap: left promiscuous mode [ 223.973568][ T2884] veth1_vlan: left promiscuous mode [ 223.979282][ T2884] veth0_vlan: left promiscuous mode [ 224.010808][ T5144] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.029181][ T5144] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.039474][ T5144] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.048679][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.068294][ T8289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.321476][ T5437] usb 1-1: USB disconnect, device number 12 [ 224.499071][ T53] Bluetooth: hci0: command tx timeout [ 224.517713][ T2884] team0 (unregistering): Port device team_slave_1 removed [ 224.554314][ T2884] team0 (unregistering): Port device team_slave_0 removed [ 224.962004][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.972474][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.000634][ T8227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.050638][ T8001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.060620][ T8001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.086658][ T8001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.108517][ T8001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.143930][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.158669][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.205475][ T8227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.268268][ T8129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.341749][ T8052] veth0_macvtap: entered promiscuous mode [ 225.386430][ T8227] hsr_slave_0: entered promiscuous mode [ 225.409104][ T8227] hsr_slave_1: entered promiscuous mode [ 225.426841][ T8227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.438075][ T8227] Cannot create hsr debugfs directory [ 225.451205][ T8052] veth1_macvtap: entered promiscuous mode [ 225.683155][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.695755][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.728577][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.756002][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.770288][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.842494][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.881668][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.906557][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.923828][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.955111][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.977328][ T8052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.989656][ T8052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.998573][ T8052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.008178][ T8052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.105426][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.145299][ T8129] veth0_vlan: entered promiscuous mode [ 226.157538][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.327565][ T8129] veth1_vlan: entered promiscuous mode [ 226.464371][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.519240][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.568129][ T8129] veth0_macvtap: entered promiscuous mode [ 226.593473][ T53] Bluetooth: hci0: command tx timeout [ 226.609940][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.617762][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.802090][ T8129] veth1_macvtap: entered promiscuous mode [ 226.844755][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.883180][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.893719][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.911954][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.923240][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.965843][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.985946][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.022027][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.055122][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.066342][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.079466][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.089952][ T8129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.108559][ T8129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.149620][ T8129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.180435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.188282][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.205870][ T8129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.235173][ T8129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.246644][ T8129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.255732][ T8129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.434419][ T8227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.464424][ T8227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.513952][ T8227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.598588][ T8227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.758027][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.777653][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.942961][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.983910][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.415653][ T8227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.577311][ T8227] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.659478][ T53] Bluetooth: hci0: command tx timeout [ 228.705574][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.712728][ T5437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.847366][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.854591][ T5437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.117726][ T8227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.174460][ T8227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.347802][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.649712][ T8227] veth0_vlan: entered promiscuous mode [ 229.684339][ T8227] veth1_vlan: entered promiscuous mode [ 229.823232][ T8227] veth0_macvtap: entered promiscuous mode [ 229.857775][ T8227] veth1_macvtap: entered promiscuous mode [ 229.919096][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.941411][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.977872][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.038474][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.084026][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.104696][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.208868][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.259326][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.310968][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.357954][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.395387][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.422448][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.445051][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.482880][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.500670][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.531197][ T8227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.544045][ T8227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.583123][ T8227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.621219][ T8227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.669567][ T8227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.695604][ T8227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.706002][ T8227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.019462][ T8415] netlink: 'syz.0.701': attribute type 12 has an invalid length. [ 231.090065][ T1045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.124121][ T1045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.285431][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.318869][ T5093] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.336637][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.585825][ T5093] usb 1-1: config index 0 descriptor too short (expected 55076, got 36) [ 231.622765][ T5093] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 231.647858][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 231.686870][ T5093] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 231.719871][ T5093] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 227, changing to 7 [ 231.780740][ T5093] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58544, setting to 1024 [ 231.830255][ T5093] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 231.867507][ T5093] usb 1-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3 [ 231.929912][ T5093] usb 1-1: Product: syz [ 231.944645][ T5093] usb 1-1: Manufacturer: syz [ 231.971897][ T5093] usb 1-1: SerialNumber: syz [ 232.011959][ T5093] usb 1-1: config 0 descriptor?? [ 232.035633][ T8411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.061757][ T5093] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 232.536236][ T2476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.824858][ T2476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.910884][ T8471] futex_wake_op: syz.2.711 tries to shift op by 32; fix this program [ 233.055614][ T2476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.230384][ T2476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.252041][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.263007][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.273250][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.304948][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.335476][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.343841][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.759021][ T2476] bridge_slave_1: left allmulticast mode [ 233.764718][ T2476] bridge_slave_1: left promiscuous mode [ 233.779223][ T2476] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.806493][ T2476] bridge_slave_0: left allmulticast mode [ 233.818725][ T2476] bridge_slave_0: left promiscuous mode [ 233.827908][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.945196][ T5148] usb 1-1: USB disconnect, device number 13 [ 234.112592][ T8500] futex_wake_op: syz.2.722 tries to shift op by 32; fix this program [ 235.118921][ T2476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.173943][ T2476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.205595][ T2476] bond0 (unregistering): Released all slaves [ 235.379508][ T5096] Bluetooth: hci2: command tx timeout [ 235.592674][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 235.949184][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.008621][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.040995][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.100221][ T9] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 236.132890][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.171519][ T9] usb 5-1: config 0 descriptor?? [ 236.197106][ T8541] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 236.333115][ T8546] futex_wake_op: syz.1.733 tries to shift op by 32; fix this program [ 236.414355][ T2476] hsr_slave_0: left promiscuous mode [ 236.457813][ T2476] hsr_slave_1: left promiscuous mode [ 236.504463][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.516128][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.548677][ T2476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.564872][ T2476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.640637][ T9] acrux 0003:1A34:0802.0004: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 236.691796][ T9] acrux 0003:1A34:0802.0004: no inputs found [ 236.692125][ T2476] veth1_macvtap: left promiscuous mode [ 236.718439][ T2476] veth0_macvtap: left promiscuous mode [ 236.726789][ T9] acrux 0003:1A34:0802.0004: Failed to enable force feedback support, error: -19 [ 236.737700][ T2476] veth1_vlan: left promiscuous mode [ 236.771333][ T2476] veth0_vlan: left promiscuous mode [ 237.474812][ T5096] Bluetooth: hci2: command tx timeout [ 237.501474][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 237.708624][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 237.724662][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.742525][ T9] usb 1-1: config 179 has no interface number 0 [ 237.753189][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 237.777612][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 237.777918][ T2476] team0 (unregistering): Port device team_slave_1 removed [ 237.812887][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.825874][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 237.852885][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.886889][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 237.900717][ T2476] team0 (unregistering): Port device team_slave_0 removed [ 237.906042][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.963390][ T8568] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 238.029014][ T1146] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 238.332140][ T5440] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 238.599374][ T5144] usb 1-1: USB disconnect, device number 14 [ 238.599529][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.613548][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.637325][ T5144] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 239.116030][ T8551] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.735'. [ 239.295618][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 239.548655][ T5096] Bluetooth: hci2: command tx timeout [ 239.606920][ T5437] usb 5-1: USB disconnect, device number 11 [ 239.846825][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.909040][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.942296][ T8482] bridge_slave_0: entered allmulticast mode [ 239.972665][ T8482] bridge_slave_0: entered promiscuous mode [ 240.007553][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.041956][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.076944][ T8482] bridge_slave_1: entered allmulticast mode [ 240.108242][ T8482] bridge_slave_1: entered promiscuous mode [ 240.312607][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.356219][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.521766][ T8482] team0: Port device team_slave_0 added [ 240.560844][ T8482] team0: Port device team_slave_1 added [ 240.644865][ T8631] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.666773][ T5096] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 240.676301][ T5096] Bluetooth: hci4: Injecting HCI hardware error event [ 240.684413][ T53] Bluetooth: hci4: hardware error 0x00 [ 240.834635][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.922587][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.994773][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.010599][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.017810][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.050716][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.513633][ T8658] netlink: 52 bytes leftover after parsing attributes in process `syz.1.763'. [ 241.515169][ T8482] hsr_slave_0: entered promiscuous mode [ 241.555582][ T8482] hsr_slave_1: entered promiscuous mode [ 241.627243][ T5096] Bluetooth: hci2: command tx timeout [ 241.632895][ T8482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.654024][ T8482] Cannot create hsr debugfs directory [ 241.911320][ T2852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.221633][ T2852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.388965][ T8666] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.422597][ T2852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.448042][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.457748][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.488957][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.510630][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.519320][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.526819][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.732363][ T2852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.743397][ T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 243.173033][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 243.929586][ T2852] bridge_slave_1: left allmulticast mode [ 243.936277][ T2852] bridge_slave_1: left promiscuous mode [ 244.013350][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.058304][ T2852] bridge_slave_0: left allmulticast mode [ 244.069389][ T2852] bridge_slave_0: left promiscuous mode [ 244.075174][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.578763][ T53] Bluetooth: hci0: command tx timeout [ 244.854637][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 244.854655][ T29] audit: type=1326 audit(1720151509.593:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 244.937493][ T29] audit: type=1326 audit(1720151509.663:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 244.980676][ T29] audit: type=1326 audit(1720151509.663:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.026505][ T29] audit: type=1326 audit(1720151509.663:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.074098][ T29] audit: type=1326 audit(1720151509.663:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.122071][ T29] audit: type=1326 audit(1720151509.673:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.181598][ T29] audit: type=1326 audit(1720151509.673:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.230737][ T29] audit: type=1326 audit(1720151509.673:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.289818][ T29] audit: type=1326 audit(1720151509.673:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.379003][ T29] audit: type=1326 audit(1720151509.673:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8740 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18ce775bd9 code=0x7ffc0000 [ 245.419889][ T2852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.439348][ T2852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.461611][ T2852] bond0 (unregistering): Released all slaves [ 245.521693][ T8741] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.788'. [ 245.677419][ T8741] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 245.872475][ C1] hrtimer: interrupt took 2029266 ns [ 246.752204][ T53] Bluetooth: hci0: command tx timeout [ 249.654833][ T53] Bluetooth: hci0: command tx timeout [ 250.156235][ T8781] netlink: 'syz.0.802': attribute type 2 has an invalid length. [ 250.164157][ T8781] netlink: 'syz.0.802': attribute type 11 has an invalid length. [ 250.388580][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.640458][ T9] usb 2-1: config index 0 descriptor too short (expected 55076, got 36) [ 250.649018][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 250.657356][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 250.667017][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 250.677262][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 227, changing to 7 [ 250.688994][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 58544, setting to 1024 [ 250.709297][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 250.718748][ T9] usb 2-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3 [ 250.727036][ T9] usb 2-1: Product: syz [ 250.732025][ T9] usb 2-1: Manufacturer: syz [ 250.736724][ T9] usb 2-1: SerialNumber: syz [ 250.760609][ T9] usb 2-1: config 0 descriptor?? [ 250.767414][ T8778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.778451][ T9] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 251.815248][ T5096] Bluetooth: hci0: command tx timeout [ 254.290591][ T9] usb 2-1: USB disconnect, device number 11 [ 254.335222][ T2852] hsr_slave_0: left promiscuous mode [ 257.659396][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.665761][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.686695][ T2852] hsr_slave_1: left promiscuous mode [ 273.794930][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.803855][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.812612][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.820954][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.829444][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.838228][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.878924][ T5096] Bluetooth: hci5: command tx timeout [ 277.978607][ T5096] Bluetooth: hci5: command tx timeout [ 278.081592][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.089111][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.127100][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.017309][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.132789][ T5096] Bluetooth: hci5: command tx timeout [ 286.377657][ T53] Bluetooth: hci5: command tx timeout [ 301.038217][ T5098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.061808][ T2852] veth1_macvtap: left promiscuous mode [ 301.067389][ T2852] veth0_macvtap: left promiscuous mode [ 301.073034][ T2852] veth1_vlan: left promiscuous mode [ 306.864861][ T5103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.874602][ T5103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.884272][ T5103] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 306.892783][ T2852] veth0_vlan: left promiscuous mode [ 306.893179][ T5103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.907108][ T5103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.924141][ T5098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.925212][ T5098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.926654][ T5098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 306.927016][ T5098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.661655][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 313.703585][ T5103] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 313.879966][ T5101] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 313.886281][ T5101] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 313.887074][ T4493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.887473][ T5101] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 313.888881][ T5101] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 313.889765][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.890281][ T5101] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 313.892383][ T5101] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 313.892769][ T5096] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 321.608850][ T5094] Bluetooth: hci8: Opcode 0x1001 failed: -110 [ 330.636652][ T5103] Bluetooth: hci6: command tx timeout [ 330.642601][ T5103] Bluetooth: hci9: command tx timeout [ 330.648449][ T5103] Bluetooth: hci7: command tx timeout [ 330.657575][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.664041][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.238490][ T5094] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 331.246842][ T5094] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 331.254667][ T5094] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 331.263801][ T5094] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 331.279045][ T5094] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 331.287941][ T5094] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 341.065448][ T5101] Bluetooth: hci8: command tx timeout [ 341.071625][ T5101] Bluetooth: hci7: command tx timeout [ 341.077221][ T5101] Bluetooth: hci9: command tx timeout [ 341.082646][ T5101] Bluetooth: hci6: command tx timeout [ 352.148502][ T5094] Bluetooth: hci6: command tx timeout [ 352.151008][ T5101] Bluetooth: hci9: command tx timeout [ 352.153930][ T5094] Bluetooth: hci7: command tx timeout [ 352.159271][ T5101] Bluetooth: hci8: command tx timeout [ 364.257453][ T5103] Bluetooth: hci7: command tx timeout [ 364.263325][ T5103] Bluetooth: hci8: command tx timeout [ 364.269094][ T5103] Bluetooth: hci9: command tx timeout [ 364.274516][ T5103] Bluetooth: hci6: command tx timeout [ 364.623161][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.820933][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.842932][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.954284][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.057379][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.068839][ T4493] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 365.083505][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.093809][ T4493] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 365.111216][ T4493] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 365.118483][ T4493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.128472][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.136137][ T4493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.144591][ T4493] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 365.152188][ T4493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.167550][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 365.177306][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.185089][ T4493] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 365.197178][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 378.139806][ T8824] Bluetooth: hci10: Opcode 0x0c1a failed: -110 [ 392.991854][ T5096] Bluetooth: hci8: command tx timeout [ 392.997314][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 393.003421][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 393.009534][ T5096] Bluetooth: hci1: command tx timeout [ 393.015567][ T5096] Bluetooth: hci3: command tx timeout [ 393.067813][ T5098] Bluetooth: hci10: command 0x0c1a tx timeout [ 393.077949][ T5098] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 408.383383][ T30] INFO: task dhcpcd:4762 blocked for more than 150 seconds. [ 408.392304][ T5101] Bluetooth: hci11: command 0x1003 tx timeout [ 408.400287][ T5101] Bluetooth: hci3: command tx timeout [ 408.405708][ T5101] Bluetooth: hci1: command tx timeout [ 408.411349][ T5096] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 408.420543][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.426843][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.433162][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 408.442584][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.468431][ T30] task:dhcpcd state:D stack:22048 pid:4762 tgid:4762 ppid:1 flags:0x00004002 [ 408.488437][ T30] Call Trace: [ 408.492688][ T30] [ 408.495635][ T30] __schedule+0x17e8/0x4a20 [ 408.508661][ T30] ? __pfx___schedule+0x10/0x10 [ 408.513549][ T30] ? __pfx_lock_release+0x10/0x10 [ 408.540292][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 408.545796][ T30] ? schedule+0x90/0x320 [ 408.556023][ T30] schedule+0x14b/0x320 [ 408.560468][ T30] schedule_preempt_disabled+0x13/0x30 [ 408.565939][ T30] __mutex_lock+0x6a4/0xd70 [ 408.570499][ T30] ? __mutex_lock+0x527/0xd70 [ 408.575187][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 408.580426][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 408.585468][ T30] ? __might_fault+0xc6/0x120 [ 408.590195][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 408.596259][ T30] ? sock_ioctl+0x664/0x8e0 [ 408.600816][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 408.606385][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 408.611984][ T30] sock_ioctl+0x683/0x8e0 [ 408.616330][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 408.621321][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 408.626267][ T30] ? security_file_ioctl+0x87/0xb0 [ 408.631418][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 408.636285][ T30] __se_sys_ioctl+0xfc/0x170 [ 408.640916][ T30] do_syscall_64+0xf3/0x230 [ 408.645440][ T30] ? clear_bhb_loop+0x35/0x90 [ 408.650159][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.656074][ T30] RIP: 0033:0x7f0194989d49 [ 408.660747][ T30] RSP: 002b:00007fff32c5a898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.669206][ T30] RAX: ffffffffffffffda RBX: 000055a2d664ac20 RCX: 00007f0194989d49 [ 408.677272][ T30] RDX: 00007fff32c5a8a0 RSI: 0000000000008982 RDI: 0000000000000011 [ 408.685276][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 408.693277][ T30] R10: 00007fff32c6af20 R11: 0000000000000246 R12: 00007fff32c5a8a0 [ 408.701909][ T30] R13: 00007fff32c5a960 R14: 000055a2d664ac20 R15: 000055a2d66575b8 [ 408.710364][ T30] [ 408.713405][ T30] INFO: task kworker/1:5:5144 blocked for more than 151 seconds. [ 408.721162][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 408.728821][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.737489][ T30] task:kworker/1:5 state:D stack:20368 pid:5144 tgid:5144 ppid:2 flags:0x00004000 [ 408.747698][ T30] Workqueue: events linkwatch_event [ 408.752945][ T30] Call Trace: [ 408.756228][ T30] [ 408.759241][ T30] __schedule+0x17e8/0x4a20 [ 408.763777][ T30] ? __pfx___schedule+0x10/0x10 [ 408.768668][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 408.774656][ T30] ? __pfx_lock_release+0x10/0x10 [ 408.779724][ T30] ? kick_pool+0x45c/0x620 [ 408.784156][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.789394][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 408.794607][ T30] ? schedule+0x90/0x320 [ 408.799420][ T30] schedule+0x14b/0x320 [ 408.803589][ T30] schedule_preempt_disabled+0x13/0x30 [ 408.809517][ T30] __mutex_lock+0x6a4/0xd70 [ 408.814040][ T30] ? __mutex_lock+0x527/0xd70 [ 408.818761][ T30] ? linkwatch_event+0xe/0x60 [ 408.823449][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 408.828523][ T30] ? process_scheduled_works+0x945/0x1830 [ 408.834251][ T30] linkwatch_event+0xe/0x60 [ 408.838789][ T30] process_scheduled_works+0xa2c/0x1830 [ 408.844371][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.850394][ T30] ? assign_work+0x364/0x3d0 [ 408.855000][ T30] worker_thread+0x86d/0xd50 [ 408.859686][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 408.865590][ T30] ? __kthread_parkme+0x169/0x1d0 [ 408.870657][ T30] ? __pfx_worker_thread+0x10/0x10 [ 408.875780][ T30] kthread+0x2f0/0x390 [ 408.879891][ T30] ? __pfx_worker_thread+0x10/0x10 [ 408.885011][ T30] ? __pfx_kthread+0x10/0x10 [ 408.889635][ T30] ret_from_fork+0x4b/0x80 [ 408.894066][ T30] ? __pfx_kthread+0x10/0x10 [ 408.898699][ T30] ret_from_fork_asm+0x1a/0x30 [ 408.904405][ T30] [ 408.907449][ T30] INFO: task syz-executor:8482 blocked for more than 151 seconds. [ 408.915500][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 408.923160][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.931861][ T30] task:syz-executor state:D stack:21024 pid:8482 tgid:8482 ppid:1 flags:0x00004006 [ 408.942081][ T30] Call Trace: [ 408.945368][ T30] [ 408.948309][ T30] __schedule+0x17e8/0x4a20 [ 408.952874][ T30] ? __pfx___schedule+0x10/0x10 [ 408.957737][ T30] ? __pfx_lock_release+0x10/0x10 [ 408.962980][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 408.968495][ T30] ? schedule+0x90/0x320 [ 408.972744][ T30] schedule+0x14b/0x320 [ 408.976909][ T30] schedule_preempt_disabled+0x13/0x30 [ 408.982401][ T30] __mutex_lock+0x6a4/0xd70 [ 408.986919][ T30] ? __mutex_lock+0x527/0xd70 [ 408.991636][ T30] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 408.998071][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.003733][ T30] unregister_netdevice_notifier_net+0x89/0x3a0 [ 409.010632][ T30] ? _raw_spin_unlock+0x28/0x50 [ 409.015494][ T30] ? mntput_no_expire+0x2da/0x850 [ 409.020557][ T30] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 409.027424][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 409.032837][ T30] ? _raw_spin_unlock+0x28/0x50 [ 409.037693][ T30] ? simple_release_fs+0x9c/0xd0 [ 409.042674][ T30] nsim_dev_hwstats_exit+0x81/0x290 [ 409.047885][ T30] ? kfree+0x149/0x360 [ 409.051999][ T30] nsim_dev_reload_destroy+0x2ad/0x490 [ 409.057474][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 409.062820][ T30] nsim_drv_remove+0x58/0x160 [ 409.067512][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 409.073628][ T30] bus_remove_device+0x34f/0x420 [ 409.078620][ T30] device_del+0x57a/0x9b0 [ 409.082973][ T30] ? __pfx_device_del+0x10/0x10 [ 409.087850][ T30] device_unregister+0x20/0xc0 [ 409.092687][ T30] del_device_store+0x363/0x480 [ 409.097563][ T30] ? __pfx_del_device_store+0x10/0x10 [ 409.102993][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 409.108532][ T30] ? bus_attr_store+0x4f/0xa0 [ 409.113234][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 409.118952][ T30] kernfs_fop_write_iter+0x3a1/0x500 [ 409.124281][ T30] vfs_write+0xa72/0xc90 [ 409.128584][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 409.134410][ T30] ? __pfx_vfs_write+0x10/0x10 [ 409.139248][ T30] ksys_write+0x1a0/0x2c0 [ 409.143606][ T30] ? __pfx_ksys_write+0x10/0x10 [ 409.148509][ T30] ? do_syscall_64+0x100/0x230 [ 409.153300][ T30] ? do_syscall_64+0xb6/0x230 [ 409.158002][ T30] do_syscall_64+0xf3/0x230 [ 409.162628][ T30] ? clear_bhb_loop+0x35/0x90 [ 409.167338][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.173287][ T30] RIP: 0033:0x7f4e8777475f [ 409.177718][ T30] RSP: 002b:00007f4e87a2f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 409.186176][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f4e8777475f [ 409.194190][ T30] RDX: 0000000000000001 RSI: 00007f4e87a2f270 RDI: 0000000000000005 [ 409.202200][ T30] RBP: 00007f4e877e45a0 R08: 0000000000000000 R09: 00007f4e87a2f077 [ 409.210927][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 409.219401][ T30] R13: 00007f4e87a2f270 R14: 00007f4e88434620 R15: 0000000000000003 [ 409.227407][ T30] [ 409.230480][ T30] INFO: task syz-executor:8676 blocked for more than 151 seconds. [ 409.238306][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 409.246040][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.254860][ T30] task:syz-executor state:D stack:21024 pid:8676 tgid:8676 ppid:1 flags:0x00004006 [ 409.265255][ T30] Call Trace: [ 409.268580][ T30] [ 409.271535][ T30] __schedule+0x17e8/0x4a20 [ 409.276083][ T30] ? __pfx___schedule+0x10/0x10 [ 409.281000][ T30] ? __pfx_lock_release+0x10/0x10 [ 409.286048][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 409.291849][ T30] ? schedule+0x90/0x320 [ 409.296102][ T30] schedule+0x14b/0x320 [ 409.300484][ T30] schedule_preempt_disabled+0x13/0x30 [ 409.305954][ T30] __mutex_lock+0x6a4/0xd70 [ 409.311283][ T30] ? __mutex_lock+0x527/0xd70 [ 409.316049][ T30] ? rtnl_newlink+0xab5/0x20a0 [ 409.321452][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.326500][ T30] ? __asan_memset+0x23/0x50 [ 409.331137][ T30] ? nla_strscpy+0x113/0x180 [ 409.335742][ T30] rtnl_newlink+0xab5/0x20a0 [ 409.340385][ T30] ? rtnl_newlink+0x501/0x20a0 [ 409.345172][ T30] ? rtnl_newlink+0x501/0x20a0 [ 409.350007][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.355042][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 409.361059][ T30] ? __pfx_lock_release+0x10/0x10 [ 409.366111][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.371178][ T30] rtnetlink_rcv_msg+0x89b/0x1180 [ 409.376221][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 409.381467][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.386937][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 409.392264][ T30] ? __pfx_validate_chain+0x10/0x10 [ 409.397472][ T30] ? __pfx_validate_chain+0x10/0x10 [ 409.402706][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 409.407667][ T30] ? mark_lock+0x9a/0x350 [ 409.412643][ T30] ? __pfx_validate_chain+0x10/0x10 [ 409.417858][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 409.423322][ T30] ? mark_lock+0x9a/0x350 [ 409.427666][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 409.432745][ T30] netlink_rcv_skb+0x1e3/0x430 [ 409.437523][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.443031][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.448356][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.453597][ T30] netlink_unicast+0x7ea/0x980 [ 409.458377][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 409.463875][ T30] ? __virt_addr_valid+0x183/0x520 [ 409.469034][ T30] ? __check_object_size+0x49c/0x900 [ 409.474331][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 409.479487][ T30] netlink_sendmsg+0x8db/0xcb0 [ 409.484272][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.489597][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 409.494547][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.499865][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 409.505335][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.510670][ T30] __sock_sendmsg+0x221/0x270 [ 409.516304][ T30] __sys_sendto+0x3a4/0x4f0 [ 409.520858][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 409.525911][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.531142][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 409.537230][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.543251][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.549621][ T30] __x64_sys_sendto+0xde/0x100 [ 409.554398][ T30] do_syscall_64+0xf3/0x230 [ 409.559269][ T30] ? clear_bhb_loop+0x35/0x90 [ 409.563977][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.569917][ T30] RIP: 0033:0x7f1271d7796c [ 409.574341][ T30] RSP: 002b:00007f127202f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 409.582796][ T30] RAX: ffffffffffffffda RBX: 00007f1272a34620 RCX: 00007f1271d7796c [ 409.590804][ T30] RDX: 000000000000003c RSI: 00007f1272a34670 RDI: 0000000000000003 [ 409.598811][ T30] RBP: 0000000000000000 R08: 00007f127202f704 R09: 000000000000000c [ 409.606790][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 409.614889][ T30] R13: 0000000000000000 R14: 00007f1272a34670 R15: 0000000000000000 [ 409.623498][ T30] [ 409.626529][ T30] INFO: task syz.1.800:8775 blocked for more than 152 seconds. [ 409.634483][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 409.642141][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.650834][ T30] task:syz.1.800 state:D stack:24592 pid:8775 tgid:8774 ppid:8052 flags:0x00000004 [ 409.661089][ T30] Call Trace: [ 409.664370][ T30] [ 409.667310][ T30] __schedule+0x17e8/0x4a20 [ 409.671876][ T30] ? __pfx___schedule+0x10/0x10 [ 409.676736][ T30] ? __pfx_lock_release+0x10/0x10 [ 409.681797][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 409.687276][ T30] ? schedule+0x90/0x320 [ 409.691550][ T30] schedule+0x14b/0x320 [ 409.695716][ T30] schedule_preempt_disabled+0x13/0x30 [ 409.701208][ T30] __mutex_lock+0x6a4/0xd70 [ 409.705731][ T30] ? __mutex_lock+0x527/0xd70 [ 409.710510][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 409.715743][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.721404][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 409.726456][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 409.732102][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.737586][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.743620][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.750003][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 409.755391][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 409.760729][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 409.766113][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 409.771442][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 409.776562][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 409.782329][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 409.787452][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 409.792698][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 409.797831][ T30] ? ref_tracker_free+0x643/0x7e0 [ 409.802902][ T30] netlink_rcv_skb+0x1e3/0x430 [ 409.807684][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.813239][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.818597][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.824793][ T30] netlink_unicast+0x7ea/0x980 [ 409.829618][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 409.834912][ T30] ? __virt_addr_valid+0x183/0x520 [ 409.840077][ T30] ? __check_object_size+0x49c/0x900 [ 409.845375][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 409.850535][ T30] netlink_sendmsg+0x8db/0xcb0 [ 409.855325][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.860676][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 409.865630][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.870963][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 409.876436][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.881760][ T30] __sock_sendmsg+0x221/0x270 [ 409.886456][ T30] sock_write_iter+0x2dd/0x400 [ 409.891258][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 409.896567][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 409.901985][ T30] ? security_file_permission+0x7f/0xa0 [ 409.907549][ T30] vfs_write+0xa72/0xc90 [ 409.911861][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 409.917161][ T30] ? __pfx_vfs_write+0x10/0x10 [ 409.921963][ T30] ? do_futex+0x33b/0x560 [ 409.927279][ T30] ksys_write+0x1a0/0x2c0 [ 409.931665][ T30] ? __pfx_ksys_write+0x10/0x10 [ 409.936526][ T30] ? __secure_computing+0x125/0x370 [ 409.941774][ T30] do_syscall_64+0xf3/0x230 [ 409.946293][ T30] ? clear_bhb_loop+0x35/0x90 [ 409.951061][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.956986][ T30] RIP: 0033:0x7f18ce775bd9 [ 409.961492][ T30] RSP: 002b:00007f18cf4e8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.969983][ T30] RAX: ffffffffffffffda RBX: 00007f18ce903f60 RCX: 00007f18ce775bd9 [ 409.977966][ T30] RDX: 00000000000000fc RSI: 00000000200002c0 RDI: 0000000000000005 [ 409.985974][ T30] RBP: 00007f18ce7e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 409.993982][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.002001][ T30] R13: 000000000000000b R14: 00007f18ce903f60 R15: 00007f18cea2fa68 [ 410.010083][ T30] [ 410.013118][ T30] INFO: task syz.1.800:8778 blocked for more than 152 seconds. [ 410.020705][ T30] Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 410.028965][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.037897][ T30] task:syz.1.800 state:D stack:26432 pid:8778 tgid:8774 ppid:8052 flags:0x00000004 [ 410.050757][ T30] Call Trace: [ 410.054146][ T30] [ 410.057094][ T30] __schedule+0x17e8/0x4a20 [ 410.061795][ T30] ? __pfx___schedule+0x10/0x10 [ 410.066703][ T30] ? __pfx_lock_release+0x10/0x10 [ 410.071767][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 410.077248][ T30] ? schedule+0x90/0x320 [ 410.081526][ T30] schedule+0x14b/0x320 [ 410.085696][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.091194][ T30] __mutex_lock+0x6a4/0xd70 [ 410.095710][ T30] ? __mutex_lock+0x527/0xd70 [ 410.100426][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 410.105637][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.110805][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 410.115854][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 410.121097][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.126574][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 410.133162][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.139911][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 410.145309][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 410.150572][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 410.155953][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 410.161470][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.166607][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 410.172376][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.177500][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 410.182759][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 410.187893][ T30] ? ref_tracker_free+0x643/0x7e0 [ 410.192971][ T30] netlink_rcv_skb+0x1e3/0x430 [ 410.197745][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 410.203255][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.208718][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.213933][ T30] netlink_unicast+0x7ea/0x980 [ 410.218751][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 410.224043][ T30] ? __virt_addr_valid+0x183/0x520 [ 410.229854][ T30] ? __check_object_size+0x49c/0x900 [ 410.236115][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 410.241286][ T30] netlink_sendmsg+0x8db/0xcb0 [ 410.246079][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.251408][ T30] ? __import_iovec+0x536/0x820 [ 410.256263][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 410.261265][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.266557][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 410.272057][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.277351][ T30] __sock_sendmsg+0x221/0x270 [ 410.282070][ T30] ____sys_sendmsg+0x525/0x7d0 [ 410.286856][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.292197][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 410.296797][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.301991][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 410.308327][ T30] ? do_syscall_64+0x100/0x230 [ 410.313181][ T30] ? do_syscall_64+0xb6/0x230 [ 410.317873][ T30] do_syscall_64+0xf3/0x230 [ 410.322420][ T30] ? clear_bhb_loop+0x35/0x90 [ 410.327109][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.333040][ T30] RIP: 0033:0x7f18ce775bd9 [ 410.338434][ T30] RSP: 002b:00007f18cf4c7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.346863][ T30] RAX: ffffffffffffffda RBX: 00007f18ce904038 RCX: 00007f18ce775bd9 [ 410.354876][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 410.362924][ T30] RBP: 00007f18ce7e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 410.370929][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.378931][ T30] R13: 000000000000006e R14: 00007f18ce904038 R15: 00007f18cea2fa68 [ 410.386925][ T30] [ 410.389987][ T30] [ 410.389987][ T30] Showing all locks held in the system: [ 410.397716][ T30] 3 locks held by kworker/0:0/8: [ 410.402684][ T30] #0: ffff888015081948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 410.415127][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 410.426235][ T30] #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x91/0xea0 [ 410.437414][ T30] 1 lock held by khungtaskd/30: [ 410.442727][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 410.452633][ T30] 2 locks held by kworker/u8:3/51: [ 410.457758][ T30] 3 locks held by kworker/0:2/1146: [ 410.463047][ T30] 5 locks held by kworker/u8:10/2852: [ 410.468444][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 410.479380][ T30] #1: ffffc9000a0efd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 410.489963][ T30] #2: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 410.499415][ T30] #3: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 410.509547][ T30] #4: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 410.520571][ T30] 3 locks held by kworker/u8:12/2884: [ 410.525941][ T30] #0: ffff888029ed6948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 410.537564][ T30] #1: ffffc9000a4ffd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 410.551856][ T30] #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 410.561777][ T30] 2 locks held by dhcpcd/4762: [ 410.566541][ T30] #0: ffffffff8f5cc048 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 410.575965][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 410.585508][ T30] 2 locks held by getty/4846: [ 410.590296][ T30] #0: ffff88802aead0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.600097][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 410.610250][ T30] 5 locks held by kworker/u9:2/5094: [ 410.615532][ T30] #0: ffff88807ebdb948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 410.626444][ T30] #1: ffffc900038dfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 410.639024][ T30] #2: ffff888027030d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 410.649442][ T30] #3: ffff888027030078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 410.659542][ T30] #4: ffffffff8f7515c8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 410.669349][ T30] 3 locks held by kworker/u9:3/5096: [ 410.674632][ T30] #0: ffff88804edaf948 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 410.685596][ T30] #1: ffffc900038ffd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 410.697747][ T30] #2: ffff88807a9e0d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 410.707206][ T30] 3 locks held by kworker/u9:5/5101: [ 410.712515][ T30] 6 locks held by kworker/u9:7/5103: [ 410.717797][ T30] 6 locks held by kworker/1:4/5143: [ 410.723021][ T30] 3 locks held by kworker/1:5/5144: [ 410.728213][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 410.739290][ T30] #1: ffffc90004217d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 410.750904][ T30] #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 410.760317][ T30] 1 lock held by syz-executor/7972: [ 410.765520][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 410.774550][ T30] 1 lock held by syz-executor/8129: [ 410.779772][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 410.788828][ T30] 7 locks held by syz-executor/8482: [ 410.794109][ T30] #0: ffff8880760fa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 410.803077][ T30] #1: ffff88801ef0d888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 410.812880][ T30] #2: ffff8880226fa008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 410.822954][ T30] #3: ffffffff8eef44e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 410.833276][ T30] #4: ffff888022cc20e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 410.843914][ T30] #5: ffff888022cc3250 (&devlink->lock_key#28){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 410.854599][ T30] #6: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 410.865755][ T30] 1 lock held by syz-executor/8676: [ 410.870983][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab5/0x20a0 [ 410.880096][ T30] 1 lock held by syz.1.800/8775: [ 410.885030][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 410.894623][ T30] 1 lock held by syz.1.800/8778: [ 410.899594][ T30] #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 410.909143][ T30] 2 locks held by syz-executor/8797: [ 410.914434][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 410.923977][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 410.934042][ T30] 2 locks held by syz-executor/8807: [ 410.939374][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 410.949391][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 410.959872][ T30] 2 locks held by syz-executor/8812: [ 410.965157][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 410.974709][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 410.984779][ T30] 2 locks held by syz-executor/8813: [ 410.990122][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 410.999584][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 411.009656][ T30] 2 locks held by syz-executor/8817: [ 411.014938][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 411.024398][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 411.034465][ T30] 2 locks held by syz-executor/8826: [ 411.039816][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 411.049274][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 411.059928][ T30] 2 locks held by syz-executor/8828: [ 411.065211][ T30] #0: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 411.075040][ T30] #1: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 411.085117][ T30] [ 411.087441][ T30] ============================================= [ 411.087441][ T30] [ 411.096194][ T30] NMI backtrace for cpu 0 [ 411.100526][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 411.110428][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 411.120500][ T30] Call Trace: [ 411.123802][ T30] [ 411.126748][ T30] dump_stack_lvl+0x241/0x360 [ 411.131448][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.136658][ T30] ? __pfx__printk+0x10/0x10 [ 411.141257][ T30] ? vprintk_emit+0x631/0x770 [ 411.145946][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 411.150986][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 411.155937][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 411.161400][ T30] ? _printk+0xd5/0x120 [ 411.165560][ T30] ? __pfx__printk+0x10/0x10 [ 411.170178][ T30] ? __wake_up_klogd+0xcc/0x110 [ 411.175051][ T30] ? __pfx__printk+0x10/0x10 [ 411.179659][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 411.184700][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.190703][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 411.196719][ T30] watchdog+0xfde/0x1020 [ 411.200983][ T30] ? watchdog+0x1ea/0x1020 [ 411.205411][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.210116][ T30] kthread+0x2f0/0x390 [ 411.214214][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.218904][ T30] ? __pfx_kthread+0x10/0x10 [ 411.223508][ T30] ret_from_fork+0x4b/0x80 [ 411.227935][ T30] ? __pfx_kthread+0x10/0x10 [ 411.232551][ T30] ret_from_fork_asm+0x1a/0x30 [ 411.237354][ T30] [ 411.240935][ T30] Sending NMI from CPU 0 to CPUs 1: [ 411.246173][ C1] NMI backtrace for cpu 1 [ 411.246186][ C1] CPU: 1 PID: 5143 Comm: kworker/1:4 Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 411.246204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 411.246214][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 411.246241][ C1] RIP: 0010:advance_sched+0x60c/0xca0 [ 411.246265][ C1] Code: 00 48 8b 6c 24 40 74 08 4c 89 ef e8 7e 90 6c f8 4b 03 1c fe 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 ef e8 54 91 6c f8 <4b> 89 9c fe c0 00 00 00 4c 39 bc 24 90 00 00 00 0f 84 21 01 00 00 [ 411.246278][ C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00000046 [ 411.246291][ C1] RAX: 1ffff11008b02a99 RBX: 17df34d48892caec RCX: ffff888024401e00 [ 411.246304][ C1] RDX: 0000000080010001 RSI: 0000000000000cb2 RDI: 0000000000000000 [ 411.246315][ C1] RBP: ffff8880458154c8 R08: ffffffff898f4be3 R09: fffff52000143180 [ 411.246327][ C1] R10: dffffc0000000000 R11: fffff52000143180 R12: dffffc0000000000 [ 411.246339][ C1] R13: ffff888045815408 R14: ffff888045815400 R15: 0000000000000001 [ 411.246351][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 411.246365][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.246377][ C1] CR2: 00007fc2e43ffd00 CR3: 000000000e132000 CR4: 00000000003506f0 [ 411.246391][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.246401][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.246412][ C1] Call Trace: [ 411.246419][ C1] [ 411.246425][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 411.246443][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 411.246462][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 411.246478][ C1] ? nmi_handle+0x2a/0x5a0 [ 411.246506][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 411.246523][ C1] ? nmi_handle+0x14f/0x5a0 [ 411.246543][ C1] ? nmi_handle+0x2a/0x5a0 [ 411.246564][ C1] ? advance_sched+0x60c/0xca0 [ 411.246583][ C1] ? default_do_nmi+0x63/0x160 [ 411.246599][ C1] ? exc_nmi+0x123/0x1f0 [ 411.246615][ C1] ? end_repeat_nmi+0xf/0x53 [ 411.246639][ C1] ? advance_sched+0x583/0xca0 [ 411.246660][ C1] ? advance_sched+0x60c/0xca0 [ 411.246680][ C1] ? advance_sched+0x60c/0xca0 [ 411.246701][ C1] ? advance_sched+0x60c/0xca0 [ 411.246720][ C1] [ 411.246726][ C1] [ 411.246739][ C1] ? __pfx_advance_sched+0x10/0x10 [ 411.246759][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 411.246779][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 411.246805][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 411.246834][ C1] hrtimer_interrupt+0x396/0x990 [ 411.246866][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 411.246888][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 411.246907][ C1] [ 411.246912][ C1] [ 411.246918][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.246939][ C1] RIP: 0010:curve25519_arch+0x2ea4/0x5710 [ 411.246956][ C1] Code: 18 c4 62 bb f6 0f 45 31 d2 66 4c 0f 38 f6 41 18 4c 89 41 18 c4 62 ab f6 5f 08 f3 4d 0f 38 f6 d1 66 4c 0f 38 f6 d3 4c 89 51 20 62 e3 f6 6f 10 f3 49 0f 38 f6 db 66 49 0f 38 f6 de 48 89 59 28 [ 411.246969][ C1] RSP: 0018:ffffc90004206fc0 EFLAGS: 00000246 [ 411.246983][ C1] RAX: cc465ebc60d2a185 RBX: 1cb93133d3f7773d RCX: ffffc900042070e0 [ 411.246995][ C1] RDX: ed22825e8aab35ad RSI: ffffc90004207240 RDI: ffffc90004207200 [ 411.247007][ C1] RBP: ffffc90004207390 R08: 1744a4815c8c0d09 R09: 6991a756b8342e3c [ 411.247019][ C1] R10: 9fc0eaa548ba2fb7 R11: 3898127d2ea91fb1 R12: ffffc90004207180 [ 411.247031][ C1] R13: 02942a48736e445b R14: 462486a3391f0a85 R15: ffffc900042070e0 [ 411.247052][ C1] ? __pfx_encode_point+0x10/0x10 [ 411.247080][ C1] ? __pfx_curve25519_arch+0x10/0x10 [ 411.247123][ C1] ? __asan_memset+0x23/0x50 [ 411.247139][ C1] ? message_ephemeral+0x354/0x4f0 [ 411.247160][ C1] mix_dh+0xc5/0x2e0 [ 411.247179][ C1] ? __pfx_mix_dh+0x10/0x10 [ 411.247207][ C1] ? __crypto_memneq+0x2e8/0x400 [ 411.247229][ C1] wg_noise_handshake_create_response+0x2a0/0xd40 [ 411.247253][ C1] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 411.247281][ C1] ? mark_lock+0x9a/0x350 [ 411.247299][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.247317][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.247335][ C1] ? ktime_get_coarse_with_offset+0x88/0x190 [ 411.247350][ C1] ? seqcount_lockdep_reader_access+0x157/0x220 [ 411.247371][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 411.247390][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 411.247411][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 411.247439][ C1] ? ktime_get_coarse_with_offset+0x143/0x190 [ 411.247456][ C1] wg_packet_send_handshake_response+0xf9/0x2e0 [ 411.247480][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 411.247501][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xc9/0x120 [ 411.247523][ C1] ? wg_packet_handshake_receive_worker+0xd2/0xf50 [ 411.247548][ C1] wg_packet_handshake_receive_worker+0x5e6/0xf50 [ 411.247576][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 411.247605][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 411.247621][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.247639][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.247661][ C1] ? process_scheduled_works+0x945/0x1830 [ 411.247678][ C1] process_scheduled_works+0xa2c/0x1830 [ 411.247707][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 411.247727][ C1] ? assign_work+0x364/0x3d0 [ 411.247745][ C1] worker_thread+0x86d/0xd50 [ 411.247766][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 411.247783][ C1] ? __kthread_parkme+0x169/0x1d0 [ 411.247802][ C1] ? __pfx_worker_thread+0x10/0x10 [ 411.247818][ C1] kthread+0x2f0/0x390 [ 411.247839][ C1] ? __pfx_worker_thread+0x10/0x10 [ 411.247854][ C1] ? __pfx_kthread+0x10/0x10 [ 411.247872][ C1] ret_from_fork+0x4b/0x80 [ 411.247890][ C1] ? __pfx_kthread+0x10/0x10 [ 411.247908][ C1] ret_from_fork_asm+0x1a/0x30 [ 411.247935][ C1] [ 411.248177][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 411.830605][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00163-g661e504db04c #0 [ 411.840500][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 411.850553][ T30] Call Trace: [ 411.853840][ T30] [ 411.856780][ T30] dump_stack_lvl+0x241/0x360 [ 411.861528][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.866733][ T30] ? __pfx__printk+0x10/0x10 [ 411.871418][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.877407][ T30] ? vscnprintf+0x5d/0x90 [ 411.882001][ T30] panic+0x349/0x860 [ 411.885994][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 411.892151][ T30] ? __pfx_panic+0x10/0x10 [ 411.896573][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 411.901953][ T30] ? __irq_work_queue_local+0x137/0x410 [ 411.907507][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 411.912881][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 411.919048][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 411.925208][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 411.931365][ T30] watchdog+0x101d/0x1020 [ 411.935700][ T30] ? watchdog+0x1ea/0x1020 [ 411.940125][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.944803][ T30] kthread+0x2f0/0x390 [ 411.948883][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.953648][ T30] ? __pfx_kthread+0x10/0x10 [ 411.958243][ T30] ret_from_fork+0x4b/0x80 [ 411.962664][ T30] ? __pfx_kthread+0x10/0x10 [ 411.967258][ T30] ret_from_fork_asm+0x1a/0x30 [ 411.972040][ T30] [ 413.098269][ T30] Shutting down cpus with NMI [ 413.103098][ T30] Kernel Offset: disabled [ 413.107416][ T30] Rebooting in 86400 seconds..