last executing test programs: 14.302807747s ago: executing program 2 (id=5778): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x8, 0x8, 0x8, 0x4600, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x100002, 0x4000005, 0x3, 0x0, @void, @value, @void, @value}, 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) syz_clone(0x62141500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08", 0x0, 0xf000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 3.639253475s ago: executing program 3 (id=5868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000091000040", @ANYBLOB="17f170654fcb6a"]) 3.369325694s ago: executing program 3 (id=5872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x4800) 3.204850414s ago: executing program 3 (id=5874): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 3.067057147s ago: executing program 3 (id=5877): r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000240)) 2.865133585s ago: executing program 3 (id=5879): chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x887c0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x305, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x4}, {0xc, 0x5}}}]}]}, 0x48}}, 0x0) 2.659681403s ago: executing program 0 (id=5880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff120101c0"]) 2.487330731s ago: executing program 4 (id=5881): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) sendto$inet6(r1, 0x0, 0x0, 0x20040848, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x80000000, @loopback}, 0x1c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fbffc001) 2.486779636s ago: executing program 1 (id=5882): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setitimer(0x2, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000240)=""/128, 0x80, 0x10042, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) 2.317087478s ago: executing program 0 (id=5883): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x4800) 2.178113771s ago: executing program 0 (id=5884): socket(0x27, 0x2, 0xffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e90000000003000600eb1f00000200403fe0000001000000f5000000000800120002000100000000000000000030006c100201009f6eae02000000adb20200000000152c000000ffffffff00010a0014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) 1.852352512s ago: executing program 0 (id=5885): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c00000000000000000000000200090018000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000fbfc00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 1.445066873s ago: executing program 4 (id=5886): open$dir(0x0, 0x404100, 0x180) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.296106829s ago: executing program 1 (id=5887): accept4(0xffffffffffffffff, 0x0, 0x0, 0x1800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001e40)={@val={0x8, 0x800}, @val={0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xfc0, 0xfffd, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x22}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}, {"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"}}}}, 0xfce) 1.098773714s ago: executing program 4 (id=5888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x3}, 'port0\x00', 0xa0bf83d7d46f2cd7, 0x400, 0x3, 0x0, 0xfffffffe, 0x2000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1.02346285s ago: executing program 2 (id=5779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 828.020851ms ago: executing program 1 (id=5889): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a00)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 801.001724ms ago: executing program 4 (id=5890): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 746.002192ms ago: executing program 2 (id=5891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff110600"]) 745.486529ms ago: executing program 0 (id=5892): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f00000004c0)="f6b2", 0x2}, {&(0x7f0000000180)="3db8f292", 0x4}], 0x2, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCXONC(r3, 0x540a, 0x1) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 617.032344ms ago: executing program 1 (id=5893): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x4800) 613.652669ms ago: executing program 4 (id=5894): socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) dup2(r2, r0) 521.164324ms ago: executing program 1 (id=5895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f0000000040)=""/48, 0x30}], 0x2}}], 0x1, 0x100, 0x0) 499.171412ms ago: executing program 2 (id=5896): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 406.599034ms ago: executing program 4 (id=5897): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) 257.035281ms ago: executing program 2 (id=5898): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000340)=@generic={0x1, 0x7, 0x7}) 94.493281ms ago: executing program 2 (id=5899): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x20000078, 0x40) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200200c1000070060000000020000"]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000005000047304e9508477706fb29fed6d8000074c723c7116206ddd11b829d3dd2c56ba6227a62353b69ec71a31d847796e5be2a04b4d54532299658d1fff0907da7373c68933e7c09722fb874da0330256f23364f654350f69cd09ed6f6a895f30f5512e60419f55ab2700999d0d45eec2691c7ea9dc8b4f73010dcadcd34", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) chdir(0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x88062, 0x0) fcntl$setlease(r5, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 79.292643ms ago: executing program 1 (id=5900): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x0) 33.123664ms ago: executing program 3 (id=5901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5902): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x9, 0x1800}], 0x1) unshare(0x20040400) semtimedop(0x0, &(0x7f00000002c0)=[{0x2, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1722.991975][T31773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.056969][T28948] usb 5-1: Using ep0 maxpacket: 16 [ 1723.091025][T28948] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.113832][T31773] hsr_slave_0: entered promiscuous mode [ 1723.121516][T28948] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.131968][T31773] hsr_slave_1: entered promiscuous mode [ 1723.161535][T31773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.166647][T28948] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1723.186902][T31773] Cannot create hsr debugfs directory [ 1723.211864][T28948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1723.226753][T28948] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1723.246282][T28948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.282425][T28948] usb 5-1: config 0 descriptor?? [ 1723.505728][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1723.551946][T31878] veth2: entered promiscuous mode [ 1723.579224][ T29] audit: type=1326 audit(1727188733.056:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1723.608154][T31878] veth2: entered allmulticast mode [ 1723.636698][ T29] audit: type=1326 audit(1727188733.056:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1723.710792][ T29] audit: type=1326 audit(1727188733.056:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1723.739441][ T29] audit: type=1326 audit(1727188733.056:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1723.779551][T31886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.787611][T31892] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1723.787611][T31892] The task syz.2.5551 (31892) triggered the difference, watch for misbehavior. [ 1723.817501][ T29] audit: type=1326 audit(1727188733.056:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1723.894199][ T29] audit: type=1326 audit(1727188733.086:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1724.005902][ T29] audit: type=1326 audit(1727188733.086:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1724.006700][T28948] hid-generic 0003:045E:05DA.0073: ignoring exceeding usage max [ 1724.081652][T28948] hid-generic 0003:045E:05DA.0073: ignoring exceeding usage max [ 1724.103737][ T29] audit: type=1326 audit(1727188733.086:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1724.112130][T28948] hid-generic 0003:045E:05DA.0073: item fetching failed at offset 33/34 [ 1724.165714][ T29] audit: type=1326 audit(1727188733.086:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1724.198500][T28948] hid-generic 0003:045E:05DA.0073: probe with driver hid-generic failed with error -22 [ 1724.227461][T28948] usb 5-1: USB disconnect, device number 125 [ 1724.297077][ T5228] Bluetooth: hci13: command tx timeout [ 1724.298287][ T29] audit: type=1326 audit(1727188733.086:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.2.5551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1724.707452][T31915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.744389][T31918] usb usb8: usbfs: process 31918 (syz.2.5558) did not claim interface 0 before use [ 1724.947263][ T5275] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1724.982723][T31921] FAULT_INJECTION: forcing a failure. [ 1724.982723][T31921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.004828][T31773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1725.047655][T31921] CPU: 1 UID: 0 PID: 31921 Comm: syz.2.5559 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1725.058108][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1725.068149][T31921] Call Trace: [ 1725.071415][T31921] [ 1725.074328][T31921] dump_stack_lvl+0x241/0x360 [ 1725.079017][T31921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.084209][T31921] ? __pfx__printk+0x10/0x10 [ 1725.088792][T31921] ? __pfx_lock_release+0x10/0x10 [ 1725.093805][T31921] should_fail_ex+0x3b0/0x4e0 [ 1725.098490][T31921] _copy_from_user+0x2f/0xe0 [ 1725.103065][T31921] copy_msghdr_from_user+0xae/0x680 [ 1725.108268][T31921] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1725.114068][T31921] __sys_sendmsg+0x22d/0x380 [ 1725.118640][T31921] ? __pfx___sys_sendmsg+0x10/0x10 [ 1725.123735][T31921] ? __pfx_vfs_write+0x10/0x10 [ 1725.128497][T31921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1725.134826][T31921] ? do_syscall_64+0x100/0x230 [ 1725.139586][T31921] ? do_syscall_64+0xb6/0x230 [ 1725.144257][T31921] do_syscall_64+0xf3/0x230 [ 1725.148757][T31921] ? clear_bhb_loop+0x35/0x90 [ 1725.153438][T31921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.159326][T31921] RIP: 0033:0x7fd1ff97def9 [ 1725.163726][T31921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.183333][T31921] RSP: 002b:00007fd1ff7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1725.191756][T31921] RAX: ffffffffffffffda RBX: 00007fd1ffb35f80 RCX: 00007fd1ff97def9 [ 1725.199710][T31921] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1725.207663][T31921] RBP: 00007fd1ff7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.215614][T31921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.223564][T31921] R13: 0000000000000000 R14: 00007fd1ffb35f80 R15: 00007fd1ffc5fa28 [ 1725.231534][T31921] [ 1725.238615][T31773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1725.276715][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 1725.295057][T31773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1725.324156][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 1725.346364][ T5275] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1725.445603][T31773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1725.483851][ T5275] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1725.503774][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.546990][ T5275] usb 2-1: Product: syz [ 1725.551178][ T5275] usb 2-1: Manufacturer: syz [ 1725.556783][ T5278] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1725.574945][ T5275] usb 2-1: SerialNumber: syz [ 1725.630909][T31913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1725.686902][ T5278] usb 5-1: device descriptor read/64, error -71 [ 1725.746845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.774886][T31773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.808755][T31773] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.860592][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.867703][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1725.876946][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.884080][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1725.956791][ T5278] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1726.088775][T31773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.097173][ T5278] usb 5-1: device descriptor read/64, error -71 [ 1726.228202][ T5278] usb usb5-port1: attempt power cycle [ 1726.326360][T31773] veth0_vlan: entered promiscuous mode [ 1726.399019][T31773] veth1_vlan: entered promiscuous mode [ 1726.548256][T31773] veth0_macvtap: entered promiscuous mode [ 1726.586430][T31773] veth1_macvtap: entered promiscuous mode [ 1726.608027][ T5278] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1726.657385][ T5278] usb 5-1: device descriptor read/8, error -71 [ 1726.665387][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.685279][T31958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.692386][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.731323][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.763329][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.776800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.786246][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.812511][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.847189][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.877631][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.894593][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.905754][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.916310][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.932390][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.936970][ T5278] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1726.943439][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.963097][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.999540][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.007352][ T5278] usb 5-1: device descriptor read/8, error -71 [ 1727.045163][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.073354][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.087224][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.137230][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.157086][ T5278] usb usb5-port1: unable to enumerate USB device [ 1727.178987][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.218797][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.258697][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.284133][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.321587][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.345144][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.377206][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.400572][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.420580][T18716] Bluetooth: hci11: command 0x0406 tx timeout [ 1727.445933][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.492144][T31773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.532719][T31958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1727.566370][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.579253][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.590111][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.602187][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.613008][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.624489][ T5275] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1727.644691][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.655226][ T5275] usb 2-1: USB disconnect, device number 67 [ 1727.664163][ T5275] usblp0: removed [ 1727.668197][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.679695][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.691126][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.702300][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.713596][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.724487][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.734767][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.754215][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.764787][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.775648][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.785813][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.796950][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.812777][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.829694][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.848145][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.862139][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.876513][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.899809][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.910283][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.926640][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.936478][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.967077][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.983449][T31773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.004500][T31773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.046439][T31773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.110120][T31773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.130778][T31773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.145863][T31773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.166737][T31773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.307006][ T5275] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1728.335728][ T2525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.360770][ T2525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.428312][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1728.436195][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1728.486981][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 1728.498803][ T5275] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1728.511477][T31997] devpts: called with bogus options [ 1728.512693][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.540265][ T5275] usb 3-1: Product: syz [ 1728.544471][ T5275] usb 3-1: Manufacturer: syz [ 1728.549511][ T5275] usb 3-1: SerialNumber: syz [ 1728.556067][ T5275] usb 3-1: config 0 descriptor?? [ 1728.579631][ T5275] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1728.706897][T28948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1728.856903][T28948] usb 5-1: Using ep0 maxpacket: 8 [ 1728.868195][T28948] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1728.896844][T28948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.909502][T28948] usb 5-1: Product: syz [ 1728.918184][T28948] usb 5-1: Manufacturer: syz [ 1728.928377][T28948] usb 5-1: SerialNumber: syz [ 1728.942487][T28948] usb 5-1: config 0 descriptor?? [ 1728.970206][T28948] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1728.984199][ T5275] gspca_sonixj: reg_r err -71 [ 1728.998793][ T5275] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1729.037054][ T5275] usb 3-1: USB disconnect, device number 94 [ 1729.399082][T28948] gspca_sonixj: reg_r err -71 [ 1729.403859][T28948] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1729.408673][ T5264] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1729.438281][T28948] usb 5-1: USB disconnect, device number 4 [ 1729.578946][ T5264] usb 2-1: Using ep0 maxpacket: 8 [ 1729.597271][ T5264] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 1729.614682][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.647160][ T5264] usb 2-1: Product: syz [ 1729.668733][ T5264] usb 2-1: Manufacturer: syz [ 1729.673466][ T5264] usb 2-1: SerialNumber: syz [ 1729.698918][ T5264] usb 2-1: config 0 descriptor?? [ 1729.863953][T32023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5576'. [ 1730.000252][T32025] input: syz1 as /devices/virtual/input/input312 [ 1730.097471][ T5312] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1730.221459][ T5264] kaweth 2-1:0.0: Firmware present in device. [ 1730.241703][ T5264] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 1730.287548][ T5264] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 1730.290854][ T5312] usb 3-1: Using ep0 maxpacket: 32 [ 1730.330801][ T5264] usb 2-1: USB disconnect, device number 68 [ 1730.338290][ T5312] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 1730.354098][ T5312] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1730.421168][ T5312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1730.471499][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.479742][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.496006][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.536397][ T5312] usb 3-1: Product: syz [ 1730.557874][ T5312] usb 3-1: Manufacturer: syz [ 1730.580711][ T5312] usb 3-1: SerialNumber: syz [ 1730.604567][T32024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1730.676792][ T5282] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1730.853711][ T5282] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1730.879513][ T5282] usb 5-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 1730.930906][ T5282] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1730.956692][ T5282] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.994500][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.061679][ T5282] usb 5-1: config 0 descriptor?? [ 1731.283836][ T5276] usb 5-1: USB disconnect, device number 5 [ 1732.225098][T32053] netlink: 'syz.1.5582': attribute type 4 has an invalid length. [ 1732.416762][T28948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1732.606855][T28948] usb 5-1: Using ep0 maxpacket: 32 [ 1732.649169][T28948] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1732.697086][T28948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.706499][T28948] usb 5-1: Product: syz [ 1732.726710][T28948] usb 5-1: Manufacturer: syz [ 1732.763131][ T5312] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 95 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1732.777443][T28948] usb 5-1: SerialNumber: syz [ 1732.805795][T28948] usb 5-1: config 0 descriptor?? [ 1732.877493][ T5312] usb 3-1: USB disconnect, device number 95 [ 1732.929523][ T5312] usblp0: removed [ 1733.066895][T32052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5581'. [ 1733.113056][T32052] netlink: 'syz.4.5581': attribute type 7 has an invalid length. [ 1733.145136][T32052] netlink: 'syz.4.5581': attribute type 8 has an invalid length. [ 1733.163068][T32052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5581'. [ 1733.496841][ T5312] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1733.497123][ T5282] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1733.669905][ T5312] usb 3-1: Using ep0 maxpacket: 8 [ 1733.702144][ T5312] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1733.721385][ T5312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.746528][ T5312] usb 3-1: Product: syz [ 1733.756733][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 1733.769246][ T5282] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1733.769643][ T5312] usb 3-1: Manufacturer: syz [ 1733.777820][ T5282] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1733.777845][ T5282] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.777865][ T5282] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1733.777887][ T5282] usb 4-1: config 1 has no interface number 0 [ 1733.777924][ T5282] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1733.777947][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.927190][ T5312] usb 3-1: SerialNumber: syz [ 1733.960085][ T5312] usb 3-1: config 0 descriptor?? [ 1733.995062][T28948] rtl8150 5-1:0.0: couldn't reset the device [ 1734.029739][ T5312] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1734.040783][T28948] rtl8150 5-1:0.0: probe with driver rtl8150 failed with error -5 [ 1734.047983][T32068] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1734.079723][ T5282] usb 4-1: string descriptor 0 read error: -71 [ 1734.094299][ T5282] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1734.103193][ T5282] snd_usb_pod 4-1:1.1: set_interface failed [ 1734.109308][ T5282] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1734.118563][ T5282] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1734.142238][ T5282] usb 4-1: USB disconnect, device number 48 [ 1734.374727][ T5312] gspca_sonixj: reg_r err -71 [ 1734.405490][ T5312] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1734.446780][ T5312] usb 3-1: USB disconnect, device number 96 [ 1735.158106][ T5282] usb 5-1: USB disconnect, device number 6 [ 1735.606712][ T5282] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1735.776948][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 1735.793716][T32100] FAULT_INJECTION: forcing a failure. [ 1735.793716][T32100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.794147][ T5282] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1735.827149][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.828042][T32100] CPU: 0 UID: 0 PID: 32100 Comm: syz.0.5600 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1735.845578][T32100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1735.851300][ T5282] usb 5-1: Product: syz [ 1735.855625][T32100] Call Trace: [ 1735.855639][T32100] [ 1735.855648][T32100] dump_stack_lvl+0x241/0x360 [ 1735.869984][ T5282] usb 5-1: Manufacturer: syz [ 1735.870634][T32100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1735.870667][T32100] ? __pfx__printk+0x10/0x10 [ 1735.870698][T32100] ? snprintf+0xda/0x120 [ 1735.880797][ T5282] usb 5-1: SerialNumber: syz [ 1735.885006][T32100] should_fail_ex+0x3b0/0x4e0 [ 1735.885042][T32100] _copy_to_user+0x2f/0xb0 [ 1735.902969][T32100] simple_read_from_buffer+0xca/0x150 [ 1735.908375][T32100] proc_fail_nth_read+0x1e9/0x250 [ 1735.913428][T32100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1735.919009][T32100] ? rw_verify_area+0x55e/0x6f0 [ 1735.923880][T32100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1735.929444][T32100] vfs_read+0x201/0xbc0 [ 1735.933603][T32100] ? __pfx_lock_release+0x10/0x10 [ 1735.938635][T32100] ? __pfx_vfs_read+0x10/0x10 [ 1735.943314][T32100] ? __fget_files+0x3f3/0x470 [ 1735.947989][T32100] ? fdget_pos+0x24e/0x320 [ 1735.952401][T32100] ksys_read+0x183/0x2b0 [ 1735.956649][T32100] ? __pfx_ksys_read+0x10/0x10 [ 1735.961417][T32100] ? do_syscall_64+0x100/0x230 [ 1735.966178][T32100] ? do_syscall_64+0xb6/0x230 [ 1735.970849][T32100] do_syscall_64+0xf3/0x230 [ 1735.975344][T32100] ? clear_bhb_loop+0x35/0x90 [ 1735.980014][T32100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.985899][T32100] RIP: 0033:0x7f45f137c93c [ 1735.990315][T32100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1736.009912][T32100] RSP: 002b:00007f45f213c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1736.018319][T32100] RAX: ffffffffffffffda RBX: 00007f45f1535f80 RCX: 00007f45f137c93c [ 1736.026277][T32100] RDX: 000000000000000f RSI: 00007f45f213c0a0 RDI: 0000000000000005 [ 1736.034252][T32100] RBP: 00007f45f213c090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.042315][T32100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.050282][T32100] R13: 0000000000000000 R14: 00007f45f1535f80 R15: 00007f45f165fa28 [ 1736.058263][T32100] [ 1736.061289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1736.094143][T32102] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1736.114452][ T5282] usb 5-1: config 0 descriptor?? [ 1736.129656][ T5282] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1736.296457][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1736.296473][ T29] audit: type=1326 audit(1727188745.766:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32107 comm="syz.2.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1736.356971][ T29] audit: type=1326 audit(1727188745.766:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32107 comm="syz.2.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x7ffc0000 [ 1736.496943][T28948] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1736.548475][ T5282] gspca_sonixj: reg_r err -71 [ 1736.555923][ T5282] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1736.579438][ T5282] usb 5-1: USB disconnect, device number 7 [ 1736.646854][T22214] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1736.664924][T28948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.676503][T28948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.687993][T28948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1736.701676][T28948] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 1736.711352][T28948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.724510][T28948] usb 4-1: config 0 descriptor?? [ 1736.763941][ T5264] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1736.806706][T22214] usb 3-1: Using ep0 maxpacket: 8 [ 1736.815929][T22214] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1736.825367][T22214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.838036][T22214] usb 3-1: Product: syz [ 1736.842231][T22214] usb 3-1: Manufacturer: syz [ 1736.847124][T22214] usb 3-1: SerialNumber: syz [ 1736.854421][T22214] usb 3-1: config 0 descriptor?? [ 1736.865465][T22214] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1736.916738][ T5264] usb 2-1: Using ep0 maxpacket: 16 [ 1736.924023][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.935750][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.951576][ T5264] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1736.964937][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.975964][ T5264] usb 2-1: config 0 descriptor?? [ 1737.204223][T28948] usbhid 4-1:0.0: can't add hid device: -71 [ 1737.219991][T32122] fuse: Bad value for 'fd' [ 1737.220686][T28948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1737.256327][T28948] usb 4-1: USB disconnect, device number 49 [ 1737.286518][T22214] gspca_sonixj: reg_r err -71 [ 1737.301683][T22214] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1737.325566][T22214] usb 3-1: USB disconnect, device number 97 [ 1737.409354][ T5264] wacom 0003:056A:0084.0074: unknown main item tag 0x3 [ 1737.428008][ T5264] wacom 0003:056A:0084.0074: item fetching failed at offset 2/5 [ 1737.438034][ T5264] wacom 0003:056A:0084.0074: parse failed [ 1737.443896][ T5264] wacom 0003:056A:0084.0074: probe with driver wacom failed with error -22 [ 1737.515973][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1737.627869][ T25] usb 2-1: USB disconnect, device number 69 [ 1737.712338][ T29] audit: type=1326 audit(1727188747.186:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32132 comm="syz.4.5613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f562937def9 code=0x0 [ 1737.867004][T32141] FAULT_INJECTION: forcing a failure. [ 1737.867004][T32141] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.883346][T32142] bond_slave_0: entered promiscuous mode [ 1737.889698][T32142] bond_slave_1: entered promiscuous mode [ 1737.900072][T32141] CPU: 0 UID: 0 PID: 32141 Comm: syz.2.5616 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1737.910523][T32141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1737.920595][T32141] Call Trace: [ 1737.923877][T32141] [ 1737.926809][T32141] dump_stack_lvl+0x241/0x360 [ 1737.930380][T32138] bond_slave_0: left promiscuous mode [ 1737.931501][T32141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1737.931533][T32141] ? __pfx__printk+0x10/0x10 [ 1737.946997][T32141] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1737.952480][T32141] ? __pfx___might_resched+0x10/0x10 [ 1737.955176][T32138] bond_slave_1: left promiscuous mode [ 1737.957763][T32141] ? lockdep_init_map_type+0xa1/0x910 [ 1737.957794][T32141] should_fail_ex+0x3b0/0x4e0 [ 1737.957819][T32141] should_failslab+0xac/0x100 [ 1737.957841][T32141] ? nft_trans_table_add+0x57/0x400 [ 1737.983319][T32141] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1737.988625][T32141] nft_trans_table_add+0x57/0x400 [ 1737.993652][T32141] nf_tables_newtable+0x1143/0x1e10 [ 1737.998855][T32141] ? __pfx_nf_tables_newtable+0x10/0x10 [ 1738.004400][T32141] ? __nla_parse+0x40/0x60 [ 1738.008816][T32141] nfnetlink_rcv+0x14dc/0x2ab0 [ 1738.013591][T32141] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1738.018725][T32141] ? netlink_deliver_tap+0x2e/0x1b0 [ 1738.024006][T32141] ? skb_clone+0x240/0x390 [ 1738.028417][T32141] ? __pfx_lock_release+0x10/0x10 [ 1738.033443][T32141] ? netlink_deliver_tap+0x2e/0x1b0 [ 1738.038640][T32141] netlink_unicast+0x7f6/0x990 [ 1738.043404][T32141] ? __pfx_netlink_unicast+0x10/0x10 [ 1738.048681][T32141] ? __virt_addr_valid+0x183/0x530 [ 1738.053783][T32141] ? __check_object_size+0x48e/0x900 [ 1738.059066][T32141] netlink_sendmsg+0x8e4/0xcb0 [ 1738.063831][T32141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1738.069112][T32141] ? aa_sock_msg_perm+0x91/0x160 [ 1738.074048][T32141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1738.079324][T32141] __sock_sendmsg+0x221/0x270 [ 1738.083998][T32141] ____sys_sendmsg+0x52a/0x7e0 [ 1738.088762][T32141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1738.094051][T32141] __sys_sendmsg+0x292/0x380 [ 1738.098635][T32141] ? __pfx___sys_sendmsg+0x10/0x10 [ 1738.103747][T32141] ? __pfx_vfs_write+0x10/0x10 [ 1738.108530][T32141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1738.114853][T32141] ? do_syscall_64+0x100/0x230 [ 1738.119616][T32141] ? do_syscall_64+0xb6/0x230 [ 1738.124290][T32141] do_syscall_64+0xf3/0x230 [ 1738.128787][T32141] ? clear_bhb_loop+0x35/0x90 [ 1738.133458][T32141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.139349][T32141] RIP: 0033:0x7fd1ff97def9 [ 1738.143760][T32141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.163364][T32141] RSP: 002b:00007fd1ff7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1738.171776][T32141] RAX: ffffffffffffffda RBX: 00007fd1ffb35f80 RCX: 00007fd1ff97def9 [ 1738.179740][T32141] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1738.187709][T32141] RBP: 00007fd1ff7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.195686][T32141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1738.203652][T32141] R13: 0000000000000000 R14: 00007fd1ffb35f80 R15: 00007fd1ffc5fa28 [ 1738.211628][T32141] [ 1738.214755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1738.623824][T32138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1738.655352][T32138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1738.677899][T32138] bond0 (unregistering): Released all slaves [ 1738.736854][ T25] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1738.867761][T32154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1738.930110][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.942600][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1738.960505][ T25] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1738.970121][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.985897][ T25] usb 3-1: config 0 descriptor?? [ 1739.000693][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1739.367122][T28948] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1739.483808][T32167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5624'. [ 1739.497091][T32167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5624'. [ 1739.538711][T28948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.577103][T28948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.611210][T28948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1739.646830][T28948] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1739.658119][T28948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.676199][T28948] usb 4-1: config 0 descriptor?? [ 1739.884526][ T25] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1740.015956][T32182] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5629'. [ 1740.028919][T32182] binder_alloc: 32181: binder_alloc_buf, no vma [ 1740.041139][T32182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5629'. [ 1740.046730][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1740.051920][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5629'. [ 1740.074416][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1740.083841][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.092967][ T25] usb 2-1: Product: syz [ 1740.097439][ T25] usb 2-1: Manufacturer: syz [ 1740.102061][ T25] usb 2-1: SerialNumber: syz [ 1740.110757][ T25] usb 2-1: config 0 descriptor?? [ 1740.122665][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1740.153933][T28948] acrux 0003:1A34:0802.0075: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 1740.171412][T28948] acrux 0003:1A34:0802.0075: no inputs found [ 1740.178089][T28948] acrux 0003:1A34:0802.0075: Failed to enable force feedback support, error: -19 [ 1740.524991][ T25] gspca_sonixj: reg_r err -71 [ 1740.552064][ T25] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1740.569529][ T25] usb 2-1: USB disconnect, device number 70 [ 1741.446815][T28948] usb 4-1: reset high-speed USB device number 50 using dummy_hcd [ 1741.535415][ T25] usb 3-1: USB disconnect, device number 98 [ 1741.828347][T32204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.903193][T32204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.996692][ T25] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1742.171679][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1742.180042][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1742.195571][ T25] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1742.220920][ T25] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1742.236862][ T25] usb 3-1: Product: syz [ 1742.241165][ T25] usb 3-1: Manufacturer: syz [ 1742.245860][ T25] usb 3-1: SerialNumber: syz [ 1742.492388][ T25] usb 3-1: Invalid connection information received from device [ 1742.712889][ T5312] usb 3-1: USB disconnect, device number 99 [ 1742.906427][ T987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.099224][ T987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.198002][ T5278] usb 4-1: USB disconnect, device number 50 [ 1743.337924][ T987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.407120][T18716] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1743.419486][ T5264] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1743.430279][T18716] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1743.440429][T18716] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1743.450527][T18716] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1743.460378][T25803] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1743.461951][T18716] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1743.472359][T25803] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1743.487977][T18716] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1743.488873][T25803] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1743.504135][T25803] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1743.518535][T25803] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1743.539095][T25803] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1743.584041][ T987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.650436][ T5264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.682445][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1743.716785][ T5264] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1743.731880][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.778076][ T5264] usb 5-1: config 0 descriptor?? [ 1743.789476][ T5264] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1743.939476][ T987] bridge_slave_1: left allmulticast mode [ 1743.945277][ T987] bridge_slave_1: left promiscuous mode [ 1743.951460][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.985508][ T987] bridge_slave_0: left allmulticast mode [ 1743.991428][ T987] bridge_slave_0: left promiscuous mode [ 1743.998341][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.553204][T32222] chnl_net:caif_netlink_parms(): no params data found [ 1744.951858][T32221] chnl_net:caif_netlink_parms(): no params data found [ 1745.047817][T32222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.070348][T32222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.090130][T32222] bridge_slave_0: entered allmulticast mode [ 1745.117968][T32222] bridge_slave_0: entered promiscuous mode [ 1745.285218][T32222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.316699][T32222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.324044][T32222] bridge_slave_1: entered allmulticast mode [ 1745.339087][T32222] bridge_slave_1: entered promiscuous mode [ 1745.357434][ T5264] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1745.472335][T32222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.527073][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 1745.577123][T25803] Bluetooth: hci12: command tx timeout [ 1745.582708][ T5264] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1745.628252][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.628340][ T987] hsr_slave_0: left promiscuous mode [ 1745.642227][ T5264] usb 3-1: Product: syz [ 1745.648991][ T5264] usb 3-1: Manufacturer: syz [ 1745.663943][T25803] Bluetooth: hci13: command tx timeout [ 1745.677749][ T5264] usb 3-1: SerialNumber: syz [ 1745.725596][ T5264] usb 3-1: config 0 descriptor?? [ 1745.733493][ T987] hsr_slave_1: left promiscuous mode [ 1745.740188][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.753080][ T5264] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1745.768049][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.792490][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.808251][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.864538][ T987] veth1_macvtap: left promiscuous mode [ 1745.873747][ T987] veth0_macvtap: left promiscuous mode [ 1745.880016][ T987] veth1_vlan: left promiscuous mode [ 1745.886419][ T987] veth0_vlan: left promiscuous mode [ 1746.191031][ T5278] usb 5-1: USB disconnect, device number 8 [ 1746.888190][ T987] team0 (unregistering): Port device team_slave_1 removed [ 1746.979235][ T987] team0 (unregistering): Port device team_slave_0 removed [ 1747.661789][T25803] Bluetooth: hci12: command tx timeout [ 1747.746955][T25803] Bluetooth: hci13: command tx timeout [ 1747.776462][T32222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.838725][T32221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1747.845854][T32221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.854198][T32221] bridge_slave_0: entered allmulticast mode [ 1747.861961][T32221] bridge_slave_0: entered promiscuous mode [ 1747.870444][T32267] netlink: 'syz.0.5650': attribute type 4 has an invalid length. [ 1748.014717][T32221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.056037][T32221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.083131][T32221] bridge_slave_1: entered allmulticast mode [ 1748.100795][T32221] bridge_slave_1: entered promiscuous mode [ 1748.140210][T32222] team0: Port device team_slave_0 added [ 1748.151160][T32222] team0: Port device team_slave_1 added [ 1748.302031][T32221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.381625][T32221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.449009][T32222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.456014][T32222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.543831][T32222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.603094][T32221] team0: Port device team_slave_0 added [ 1748.618913][T32222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.636443][T32222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.684881][T32222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.712877][T32221] team0: Port device team_slave_1 added [ 1748.799721][T32221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.817702][T32221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.851465][T32221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.915669][T32221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.923304][T32221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.952602][T32221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.085044][T32222] hsr_slave_0: entered promiscuous mode [ 1749.100429][T32222] hsr_slave_1: entered promiscuous mode [ 1749.108693][T32222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1749.116318][T32222] Cannot create hsr debugfs directory [ 1749.133344][T32221] hsr_slave_0: entered promiscuous mode [ 1749.149345][T32221] hsr_slave_1: entered promiscuous mode [ 1749.165117][T32221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1749.181221][T32221] Cannot create hsr debugfs directory [ 1749.313647][ T987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.415914][ T5264] gspca_sonixj: Unknown sensor 0000 [ 1749.503579][ T987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.576819][ T5278] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1749.620054][T32254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1749.642521][T32254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1749.681676][ T987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.693625][ T5264] gspca_sonixj: reg_w err -71 [ 1749.701976][ T5264] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1749.717255][ T5278] usb 5-1: device descriptor read/64, error -71 [ 1749.737827][T25803] Bluetooth: hci12: command tx timeout [ 1749.743662][ T5264] usb 3-1: USB disconnect, device number 100 [ 1749.811382][ T987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.822550][T25803] Bluetooth: hci13: command tx timeout [ 1749.976830][ T5278] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1750.156738][ T5278] usb 5-1: device descriptor read/64, error -71 [ 1750.255777][ T987] bridge_slave_1: left allmulticast mode [ 1750.267238][ T5278] usb usb5-port1: attempt power cycle [ 1750.277707][ T987] bridge_slave_1: left promiscuous mode [ 1750.283462][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.300281][ T987] bridge_slave_0: left allmulticast mode [ 1750.316344][ T987] bridge_slave_0: left promiscuous mode [ 1750.326906][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.506845][ T5275] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1750.646883][ T5278] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1750.668379][ T5275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.682794][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1750.696363][ T5275] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1750.706368][ T5278] usb 5-1: device descriptor read/8, error -71 [ 1750.708816][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.727515][ T5275] usb 3-1: config 0 descriptor?? [ 1750.742283][ T5275] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1750.966727][ T5278] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1750.990175][ T5278] usb 5-1: device descriptor read/8, error -71 [ 1750.999836][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.012129][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.024563][ T987] bond0 (unregistering): Released all slaves [ 1751.108442][ T5278] usb usb5-port1: unable to enumerate USB device [ 1751.562148][ T987] hsr_slave_0: left promiscuous mode [ 1751.568968][ T987] hsr_slave_1: left promiscuous mode [ 1751.575326][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1751.583620][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.593225][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1751.601654][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.630844][ T987] veth1_macvtap: left promiscuous mode [ 1751.636550][ T987] veth0_macvtap: left promiscuous mode [ 1751.642737][ T987] veth1_vlan: left promiscuous mode [ 1751.648305][ T987] veth0_vlan: left promiscuous mode [ 1751.817145][T25803] Bluetooth: hci12: command tx timeout [ 1751.896712][T25803] Bluetooth: hci13: command tx timeout [ 1752.718380][ T987] team0 (unregistering): Port device team_slave_1 removed [ 1752.797712][ T987] team0 (unregistering): Port device team_slave_0 removed [ 1753.239534][ T5282] usb 3-1: USB disconnect, device number 101 [ 1753.702789][ T5282] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1753.898718][ T5282] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1753.910986][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.938409][ T5282] usb 3-1: config 0 descriptor?? [ 1754.239673][T32221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1754.270049][T32349] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1754.419606][T32221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1754.483562][T32221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1754.565584][T32221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1755.307566][T32370] netlink: 'syz.4.5666': attribute type 10 has an invalid length. [ 1755.359979][T32370] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1755.385305][T32221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1755.482776][T32371] wlan1: mtu less than device minimum [ 1755.515916][T32222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1755.575413][T32222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1755.632483][T32222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1755.682851][T32222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1755.736047][T32221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.806215][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.813397][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.930177][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.937346][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.126252][T32222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.191002][T32222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.238804][T32221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.278820][ T5275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1756.298256][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.305350][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.375211][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.382376][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.451628][ T5282] [drm:udl_init] *ERROR* Selecting channel failed [ 1756.486970][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 1756.498824][ T5282] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1756.523767][ T5282] [drm] Initialized udl on minor 2 [ 1756.530669][ T5275] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1756.538185][T32221] veth0_vlan: entered promiscuous mode [ 1756.552483][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.574054][ T5282] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1756.593787][ T5275] usb 5-1: Product: syz [ 1756.605320][ T5282] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1756.615194][ T5275] usb 5-1: Manufacturer: syz [ 1756.629912][ T5275] usb 5-1: SerialNumber: syz [ 1756.650797][T22214] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1756.659751][ T5282] usb 3-1: USB disconnect, device number 102 [ 1756.669620][ T5275] usb 5-1: config 0 descriptor?? [ 1756.681807][T22214] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1756.691765][ T5275] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1756.771313][T32221] veth1_vlan: entered promiscuous mode [ 1756.919102][T32221] veth0_macvtap: entered promiscuous mode [ 1756.965559][T32221] veth1_macvtap: entered promiscuous mode [ 1756.966385][ T29] audit: type=1326 audit(1727188766.436:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32390 comm="syz.2.5669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x0 [ 1757.094169][T32222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.134521][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.165889][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.198380][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.231165][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.265119][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.299439][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.312612][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.323328][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.334875][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.348017][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.388225][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.416879][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.436627][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.460079][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.468874][T32402] FAULT_INJECTION: forcing a failure. [ 1757.468874][T32402] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.482898][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.484080][T32402] CPU: 1 UID: 0 PID: 32402 Comm: syz.0.5670 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1757.498493][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.503987][T32402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1757.514220][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.523794][T32402] Call Trace: [ 1757.523806][T32402] [ 1757.523816][T32402] dump_stack_lvl+0x241/0x360 [ 1757.523849][T32402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1757.534832][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.537499][T32402] ? __pfx__printk+0x10/0x10 [ 1757.537529][T32402] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1757.537553][T32402] ? __pfx___might_resched+0x10/0x10 [ 1757.537579][T32402] should_fail_ex+0x3b0/0x4e0 [ 1757.537603][T32402] should_failslab+0xac/0x100 [ 1757.537626][T32402] ? io_rsrc_data_alloc+0x61/0x270 [ 1757.537647][T32402] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1757.537668][T32402] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1757.537694][T32402] io_rsrc_data_alloc+0x61/0x270 [ 1757.537722][T32402] io_sqe_buffers_register+0x1d6/0x750 [ 1757.537755][T32402] ? kmem_cache_free+0x1a2/0x420 [ 1757.537777][T32402] ? __se_sys_io_uring_register+0x20a/0x1800 [ 1757.537802][T32402] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 1757.537821][T32402] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1757.537852][T32402] ? __fget_files+0x29/0x470 [ 1757.537878][T32402] __se_sys_io_uring_register+0x9be/0x1800 [ 1757.537908][T32402] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 1757.537930][T32402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1757.537957][T32402] ? do_syscall_64+0x100/0x230 [ 1757.537984][T32402] ? do_syscall_64+0xb6/0x230 [ 1757.538010][T32402] do_syscall_64+0xf3/0x230 [ 1757.538035][T32402] ? clear_bhb_loop+0x35/0x90 [ 1757.538061][T32402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.538085][T32402] RIP: 0033:0x7f45f137def9 [ 1757.538103][T32402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.538120][T32402] RSP: 002b:00007f45f213c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1757.538144][T32402] RAX: ffffffffffffffda RBX: 00007f45f1535f80 RCX: 00007f45f137def9 [ 1757.538160][T32402] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 1757.538173][T32402] RBP: 00007f45f213c090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.538187][T32402] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 1757.538200][T32402] R13: 0000000000000000 R14: 00007f45f1535f80 R15: 00007f45f165fa28 [ 1757.538230][T32402] [ 1757.769642][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.780233][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.790178][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.800674][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.810594][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.821551][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.831498][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1757.841998][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.856841][T32221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.924494][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.935748][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.953026][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.969691][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1757.981784][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1757.994263][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.004873][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.015529][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.036780][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.048331][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.062936][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.073872][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.084066][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.095565][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.105681][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.116424][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.126343][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.137751][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.147914][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.160793][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.173109][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.183922][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.194059][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.204787][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.217230][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.228259][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.238145][T32221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.249047][T32221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.263381][T32221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.277077][ T5312] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1758.290067][T32221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.299312][T32221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.308651][T32221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.319324][T32221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.439304][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.464942][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.506510][ T5312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1758.525465][T32222] veth0_vlan: entered promiscuous mode [ 1758.543949][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.558236][ T5312] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 1758.580501][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.598635][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.635748][ T5312] usb 3-1: config 0 descriptor?? [ 1758.650325][T32222] veth1_vlan: entered promiscuous mode [ 1758.679631][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.696699][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.739905][T32222] veth0_macvtap: entered promiscuous mode [ 1758.776295][T32222] veth1_macvtap: entered promiscuous mode [ 1758.823432][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.854447][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.885789][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.897507][T32421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1758.925093][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.945595][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.986708][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.006681][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.036761][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.052372][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.065039][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.075744][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.092201][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.103390][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.119233][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.131619][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.142442][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.154121][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.168035][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.203931][ T5312] usbhid 3-1:0.0: can't add hid device: -71 [ 1759.225175][ T5312] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1759.235272][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.259228][ T5312] usb 3-1: USB disconnect, device number 103 [ 1759.267602][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.298675][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.317023][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.327512][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.338789][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.350544][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.362027][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.372749][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.389559][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.402969][T32222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.432629][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.444787][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.465569][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.489552][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.506732][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.526827][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.547371][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.566817][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.587071][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.610992][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.631575][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.652476][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.671511][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.693384][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.713873][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.737134][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.756748][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.776833][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.796765][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.818071][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.836753][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.856781][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.876758][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.887525][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.906777][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.937523][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.953943][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.977166][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.996439][T32222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.020569][T32222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.049527][T32222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1760.072491][T32425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1760.083003][T32222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.093771][T32222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.106348][T32222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.115968][T32222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.348946][ T5275] gspca_sonixj: Unknown sensor 0000 [ 1760.374525][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.403787][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.453583][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.472262][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.556040][T32383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.577007][T32383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.587904][ T5275] gspca_sonixj: reg_w err -71 [ 1760.592760][ T5275] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1760.622843][ T5275] usb 5-1: USB disconnect, device number 13 [ 1761.096478][T32460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1761.152926][T32464] Cannot find del_set index 0 as target [ 1761.582510][T22214] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1761.726740][ T5275] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1761.748418][T22214] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 1761.784409][T22214] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1761.806890][T22214] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1761.821942][T22214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.881769][ T5275] usb 5-1: device descriptor read/64, error -71 [ 1762.097111][T22214] usb 4-1: string descriptor 0 read error: -32 [ 1762.113445][T32494] FAULT_INJECTION: forcing a failure. [ 1762.113445][T32494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1762.132211][T22214] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1762.143205][ T5275] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1762.166024][T32494] CPU: 1 UID: 0 PID: 32494 Comm: syz.1.5683 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1762.176467][T32494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1762.186513][T32494] Call Trace: [ 1762.189781][T32494] [ 1762.192700][T32494] dump_stack_lvl+0x241/0x360 [ 1762.197373][T32494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1762.202564][T32494] ? __pfx__printk+0x10/0x10 [ 1762.207144][T32494] ? __pfx_lock_release+0x10/0x10 [ 1762.212163][T32494] should_fail_ex+0x3b0/0x4e0 [ 1762.216842][T32494] _copy_to_iter+0x1ed/0x1d60 [ 1762.221540][T32494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1762.227548][T32494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1762.233924][T32494] ? __pfx__copy_to_iter+0x10/0x10 [ 1762.239065][T32494] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1762.245335][T32494] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1762.251696][T32494] signalfd_read_iter+0xf61/0x16a0 [ 1762.256947][T32494] ? signalfd_read_iter+0x870/0x16a0 [ 1762.262257][T32494] ? __pfx_signalfd_read_iter+0x10/0x10 [ 1762.267835][T32494] ? __pfx_default_wake_function+0x10/0x10 [ 1762.273668][T32494] ? end_current_label_crit_section+0x151/0x180 [ 1762.279947][T32494] vfs_read+0x9bb/0xbc0 [ 1762.284120][T32494] ? __pfx_lock_release+0x10/0x10 [ 1762.289169][T32494] ? __pfx_vfs_read+0x10/0x10 [ 1762.293885][T32494] ? fdget_pos+0x19a/0x320 [ 1762.298341][T32494] ksys_read+0x183/0x2b0 [ 1762.302618][T32494] ? __pfx_ksys_read+0x10/0x10 [ 1762.307412][T32494] ? do_syscall_64+0x100/0x230 [ 1762.312295][T32494] ? do_syscall_64+0xb6/0x230 [ 1762.317113][T32494] do_syscall_64+0xf3/0x230 [ 1762.321650][T32494] ? clear_bhb_loop+0x35/0x90 [ 1762.326355][T32494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.332273][T32494] RIP: 0033:0x7fcff1f7def9 [ 1762.336711][T32494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1762.356344][T32494] RSP: 002b:00007fcff2e2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1762.364793][T32494] RAX: ffffffffffffffda RBX: 00007fcff2135f80 RCX: 00007fcff1f7def9 [ 1762.372796][T32494] RDX: 00000000fffffef0 RSI: 00000000200008c0 RDI: 0000000000000003 [ 1762.380794][T32494] RBP: 00007fcff2e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.388790][T32494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.396782][T32494] R13: 0000000000000000 R14: 00007fcff2135f80 R15: 00007fcff225fa28 [ 1762.404791][T32494] [ 1762.576734][ T5275] usb 5-1: device descriptor read/64, error -71 [ 1762.617187][ T5282] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1762.687555][ T5275] usb usb5-port1: attempt power cycle [ 1762.767843][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 1762.784977][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1762.801045][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1762.848501][ T5282] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 1762.864997][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1762.905522][ T5282] usb 3-1: Product: syz [ 1762.915668][ T5282] usb 3-1: SerialNumber: syz [ 1762.936361][ T5282] usb 3-1: config 0 descriptor?? [ 1763.036928][ T5275] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1763.073971][ T5275] usb 5-1: device descriptor read/8, error -71 [ 1763.336927][ T5275] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1763.372425][T22214] usb 3-1: USB disconnect, device number 104 [ 1763.385859][ T5275] usb 5-1: device descriptor read/8, error -71 [ 1763.415595][T32515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1763.517363][ T5275] usb usb5-port1: unable to enumerate USB device [ 1764.405684][T32549] Cannot find del_set index 0 as target [ 1764.430722][ T5264] usb 4-1: USB disconnect, device number 51 [ 1764.516815][ T5275] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1764.679549][ T5275] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.714451][ T5275] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1764.736766][ T5278] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1764.752582][ T5275] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1764.810266][ T5275] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1764.844164][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.852518][ T5264] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1764.884288][T32559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.886375][ T5275] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1764.926124][ T5275] usb 2-1: invalid MIDI out EP 0 [ 1764.988558][ T5278] usb 3-1: config 0 has an invalid interface number: 69 but max is 1 [ 1765.018554][ T5264] usb 4-1: Using ep0 maxpacket: 8 [ 1765.029828][ T5278] usb 3-1: config 0 has no interface number 1 [ 1765.047104][ T5278] usb 3-1: New USB device found, idVendor=1b09, idProduct=0157, bcdDevice=a5.1f [ 1765.052772][ T5264] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1765.065566][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.077949][ T5278] usb 3-1: Product: syz [ 1765.082704][ T5278] usb 3-1: Manufacturer: syz [ 1765.121528][ T5278] usb 3-1: SerialNumber: syz [ 1765.126660][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.156759][ T5278] usb 3-1: config 0 descriptor?? [ 1765.159031][ T5264] usb 4-1: Product: syz [ 1765.168753][ T5275] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1765.192337][ T5264] usb 4-1: Manufacturer: syz [ 1765.200189][ T5278] hub 3-1:0.69: bad descriptor, ignoring hub [ 1765.224493][ T5264] usb 4-1: SerialNumber: syz [ 1765.226710][ T5278] hub 3-1:0.69: probe with driver hub failed with error -5 [ 1765.253935][ T5264] usb 4-1: config 0 descriptor?? [ 1765.271730][ T5264] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1765.290250][ T5278] hub 3-1:0.0: bad descriptor, ignoring hub [ 1765.311124][ T5278] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1765.449340][T32550] netlink: 'syz.2.5688': attribute type 32 has an invalid length. [ 1765.534117][T32550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5688'. [ 1765.896788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.129320][T32497] coredump: 342(syz.2.5681): written to core: VMAs: 36, size 99516416; core: 62247990 bytes, pos 99524608 [ 1766.210222][T32550] unknown channel width for channel at 909000KHz? [ 1766.262727][T32550] unknown channel width for channel at 909000KHz? [ 1766.284465][ T5264] gspca_sq905: bulk read fail (-22) len 0/4 [ 1766.308040][T32550] unknown channel width for channel at 909000KHz? [ 1766.314891][ T5264] sq905 4-1:0.0: probe with driver sq905 failed with error -5 [ 1766.326907][T28948] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1766.343706][T32574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.395711][T32574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.504310][ T5276] usb 4-1: USB disconnect, device number 52 [ 1766.527443][ T5278] usb 3-1: USB disconnect, device number 105 [ 1766.538657][T28948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.550965][T28948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1766.569074][T28948] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1766.580671][T28948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1766.646664][T28948] usb 5-1: SerialNumber: syz [ 1766.875678][T32578] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5698'. [ 1766.896937][T32578] openvswitch: netlink: Tunnel attr 15700 out of range max 16 [ 1766.947051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.979696][T28948] usb 5-1: 0:2 : does not exist [ 1766.996397][T28948] usb 5-1: unit 174 not found! [ 1767.068779][T28948] usb 5-1: USB disconnect, device number 18 [ 1767.183006][T21470] udevd[21470]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1767.267642][ T5278] usb 2-1: USB disconnect, device number 71 [ 1767.646885][T22214] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1767.676775][ T5264] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1767.826861][T22214] usb 4-1: device descriptor read/64, error -71 [ 1767.848542][ T5264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.866686][ T5264] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1767.900473][ T5264] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1767.921749][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1767.946801][ T5264] usb 3-1: SerialNumber: syz [ 1768.076924][T22214] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1768.167669][T32590] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1768.204270][ T5264] usb 3-1: 0:2 : does not exist [ 1768.236975][T22214] usb 4-1: device descriptor read/64, error -71 [ 1768.269367][ T5264] usb 3-1: USB disconnect, device number 106 [ 1768.357027][T22214] usb usb4-port1: attempt power cycle [ 1768.697287][T22214] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1768.739690][T22214] usb 4-1: device descriptor read/8, error -71 [ 1768.976849][T22214] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1769.018270][T22214] usb 4-1: device descriptor read/8, error -71 [ 1769.130595][T22214] usb usb4-port1: unable to enumerate USB device [ 1770.606966][T22214] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1770.904819][T22214] usb 5-1: Using ep0 maxpacket: 8 [ 1770.917856][T22214] usb 5-1: no configurations [ 1770.924340][T22214] usb 5-1: can't read configurations, error -22 [ 1771.056765][T22214] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1771.118355][T32626] netlink: 'syz.2.5714': attribute type 2 has an invalid length. [ 1771.144086][T32626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5714'. [ 1771.203547][T32628] ip6gretap0: entered promiscuous mode [ 1771.213503][T32628] vlan3: entered promiscuous mode [ 1771.218890][T22214] usb 5-1: Using ep0 maxpacket: 8 [ 1771.224365][T32628] vlan3: entered allmulticast mode [ 1771.231526][T22214] usb 5-1: no configurations [ 1771.236327][T22214] usb 5-1: can't read configurations, error -22 [ 1771.251490][T32628] ip6gretap0: entered allmulticast mode [ 1771.259085][ T29] audit: type=1326 audit(1727188780.726:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32625 comm="syz.2.5714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff97def9 code=0x0 [ 1771.285207][T22214] usb usb5-port1: attempt power cycle [ 1771.320799][T32628] ip6gretap0: left allmulticast mode [ 1771.327239][T32628] ip6gretap0: left promiscuous mode [ 1771.336836][ T5275] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1771.502457][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 1771.536738][ T5275] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1771.567162][ T5275] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1771.594524][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.619989][ T5275] usb 4-1: config 0 descriptor?? [ 1771.666957][T22214] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1771.698876][T22214] usb 5-1: Using ep0 maxpacket: 8 [ 1771.716016][T22214] usb 5-1: no configurations [ 1771.722775][T22214] usb 5-1: can't read configurations, error -22 [ 1771.856853][T22214] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1771.888141][T22214] usb 5-1: Using ep0 maxpacket: 8 [ 1771.915069][T22214] usb 5-1: no configurations [ 1771.934849][T22214] usb 5-1: can't read configurations, error -22 [ 1771.965139][T22214] usb usb5-port1: unable to enumerate USB device [ 1772.327872][T32632] block device autoloading is deprecated and will be removed. [ 1772.526692][T22214] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1772.556725][ T5275] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1772.699119][T22214] usb 2-1: Using ep0 maxpacket: 16 [ 1772.708693][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 1772.733538][T22214] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1772.748505][ T5275] usb 3-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config [ 1772.766318][T22214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1772.777639][ T5275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1772.793064][T22214] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1772.806237][T22214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.806458][ T5275] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1772.823913][T22214] usb 2-1: Product: syz [ 1772.834052][T22214] usb 2-1: Manufacturer: syz [ 1772.838746][T22214] usb 2-1: SerialNumber: syz [ 1772.850261][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.864885][T22214] usb 2-1: config 0 descriptor?? [ 1772.872152][ T5275] usb 3-1: Product: Џ쥻퉝꺘◄햬넊䝿岡ꪓ瞳㜓柩紅证ၨ陟ꉏ២蕿㴏沦ⱘﴏ軼㣃⎩촌傋짉숡侸퍑꧵妒쓜๕ឝ熺刉〿ᦠ▔ঠ☎얞破ឫ葺涙靏뺂䁪寽ꖯ邉뚝翜ಈ夲맞耛뱢ᷳ鞦렏椿잜﫚맔睮僽庛輵곥奍殗㦻ꙙ᠊ [ 1772.908751][T22214] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1772.918983][T22214] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1772.926223][ T5275] usb 3-1: Manufacturer: 鎅橘ⲉ穈ᣣ㥧枳澦믐튶쨚謩气麗ힸᇯ濨ꡅЫ♄싅룍믹ᯇ⧂䑰돭桚㊕纭䧟厃߶伻͚⯙돥࡜᫭䢈垵谝閎籒㉄馷˭⌕彗椪ꑐꅋ㝇㷖飺쾪 [ 1772.956917][ T5275] usb 3-1: SerialNumber: syz [ 1773.387019][T22214] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1773.396036][T22214] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1773.410947][ T5275] usb 3-1: 0:2 : does not exist [ 1773.420333][T22214] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1773.428526][T22214] em28xx 2-1:0.0: No AC97 audio processor [ 1773.446314][ T5275] usb 3-1: USB disconnect, device number 107 [ 1773.475520][T22214] usb 2-1: USB disconnect, device number 72 [ 1773.504529][T22214] em28xx 2-1:0.0: Disconnecting em28xx [ 1773.527484][T22214] em28xx 2-1:0.0: Freeing device [ 1773.548924][T21469] udevd[21469]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1773.675518][T32657] netlink: 'syz.4.5721': attribute type 4 has an invalid length. [ 1774.224455][T32663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1774.764531][ T5278] usb 4-1: USB disconnect, device number 57 [ 1774.890459][T32678] fuse: Unknown parameter 'user_i00000000000000000000' [ 1774.967596][ T5275] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1775.137025][T22214] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1775.156103][ T5275] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1775.172036][ T5275] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1775.191876][ T5275] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1775.205923][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.221311][T32676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1775.270458][ T5275] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1775.360150][T22214] usb 2-1: Using ep0 maxpacket: 16 [ 1775.365488][ T5264] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1775.396897][T22214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.410637][T22214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.421927][T22214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1775.441569][T22214] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1775.453971][T22214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.466016][ T5276] usb 5-1: USB disconnect, device number 23 [ 1775.477738][T22214] usb 2-1: config 0 descriptor?? [ 1775.538032][ T5264] usb 4-1: Using ep0 maxpacket: 8 [ 1775.543740][ T5264] usb 4-1: no configurations [ 1775.548508][ T5264] usb 4-1: can't read configurations, error -22 [ 1775.676962][ T5264] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1775.837683][ T5264] usb 4-1: Using ep0 maxpacket: 8 [ 1775.850912][ T5264] usb 4-1: no configurations [ 1775.857487][ T5264] usb 4-1: can't read configurations, error -22 [ 1775.864419][ T5264] usb usb4-port1: attempt power cycle [ 1775.904282][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x2 [ 1775.924081][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1775.949805][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1775.972901][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1775.993172][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.001349][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.010887][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.021833][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.032822][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.041806][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.050555][T22214] hid-multitouch 0003:045E:9994.0076: unknown main item tag 0x0 [ 1776.069048][T22214] hid-multitouch 0003:045E:9994.0076: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0 [ 1776.131108][T32680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.146579][T32680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.173256][ T5276] usb 2-1: USB disconnect, device number 73 [ 1776.219241][ T5264] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1776.257246][ T5264] usb 4-1: Using ep0 maxpacket: 8 [ 1776.263130][ T5264] usb 4-1: no configurations [ 1776.270278][ T5264] usb 4-1: can't read configurations, error -22 [ 1776.379951][T32700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1776.410014][ T5264] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1776.447363][ T5264] usb 4-1: Using ep0 maxpacket: 8 [ 1776.453201][T32702] FAULT_INJECTION: forcing a failure. [ 1776.453201][T32702] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.468677][ T5264] usb 4-1: no configurations [ 1776.473302][ T5264] usb 4-1: can't read configurations, error -22 [ 1776.481918][T32702] CPU: 1 UID: 0 PID: 32702 Comm: syz.2.5738 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1776.492373][T32702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1776.502457][T32702] Call Trace: [ 1776.505744][T32702] [ 1776.508680][T32702] dump_stack_lvl+0x241/0x360 [ 1776.513383][T32702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1776.518599][T32702] ? __pfx__printk+0x10/0x10 [ 1776.523208][T32702] ? fs_reclaim_acquire+0x93/0x140 [ 1776.528345][T32702] ? __pfx___might_resched+0x10/0x10 [ 1776.533651][T32702] ? dynamic_dname+0x141/0x1b0 [ 1776.538448][T32702] should_fail_ex+0x3b0/0x4e0 [ 1776.543149][T32702] ? tomoyo_encode+0x26f/0x540 [ 1776.547932][T32702] should_failslab+0xac/0x100 [ 1776.552619][T32702] ? tomoyo_encode+0x26f/0x540 [ 1776.557397][T32702] __kmalloc_noprof+0xd8/0x400 [ 1776.562185][T32702] tomoyo_encode+0x26f/0x540 [ 1776.566799][T32702] ? __pfx_sockfs_dname+0x10/0x10 [ 1776.571852][T32702] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1776.577524][T32702] tomoyo_path_number_perm+0x23a/0x880 [ 1776.583012][T32702] ? tomoyo_path_number_perm+0x208/0x880 [ 1776.588667][T32702] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1776.594716][T32702] ? __fget_files+0x29/0x470 [ 1776.599326][T32702] ? __fget_files+0x3f3/0x470 [ 1776.604030][T32702] security_file_ioctl+0xc6/0x2a0 [ 1776.609075][T32702] __se_sys_ioctl+0x47/0x170 [ 1776.613692][T32702] do_syscall_64+0xf3/0x230 [ 1776.618206][T32702] ? clear_bhb_loop+0x35/0x90 [ 1776.622875][T32702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.628770][T32702] RIP: 0033:0x7fd1ff97def9 [ 1776.633202][T32702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1776.652830][T32702] RSP: 002b:00007fd1ff7f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.661356][T32702] RAX: ffffffffffffffda RBX: 00007fd1ffb35f80 RCX: 00007fd1ff97def9 [ 1776.668751][T32706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5739'. [ 1776.669329][T32702] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 1776.686324][T32702] RBP: 00007fd1ff7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.694314][T32702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.702301][T32702] R13: 0000000000000000 R14: 00007fd1ffb35f80 R15: 00007fd1ffc5fa28 [ 1776.710303][T32702] [ 1776.713442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1776.722890][ T5264] usb usb4-port1: unable to enumerate USB device [ 1776.746849][T32702] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1776.782647][T32709] fuse: Unknown parameter 'user_i00000000000000000000' [ 1777.206744][T22214] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1777.326893][ T5275] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1777.356863][T22214] usb 3-1: device descriptor read/64, error -71 [ 1777.486721][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 1777.501195][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 1777.537820][ T5275] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1777.582442][ T5275] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1777.601750][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.614253][ T5275] usb 2-1: Product: syz [ 1777.619393][T22214] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1777.635488][ T5275] usb 2-1: Manufacturer: syz [ 1777.640458][ T5275] usb 2-1: SerialNumber: syz [ 1777.652933][T32721] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1777.759792][T22214] usb 3-1: device descriptor read/64, error -71 [ 1777.777577][ T5276] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1777.887347][T22214] usb usb3-port1: attempt power cycle [ 1777.950827][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1777.980773][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1778.016236][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1778.053844][ T5276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1778.096781][ T5276] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1778.128022][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.172422][ T5276] usb 5-1: config 0 descriptor?? [ 1778.237167][T22214] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1778.267743][T22214] usb 3-1: device descriptor read/8, error -71 [ 1778.507002][T22214] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1778.547536][T22214] usb 3-1: device descriptor read/8, error -71 [ 1778.607622][ T5276] plantronics 0003:047F:FFFF.0077: unknown main item tag 0x0 [ 1778.640194][ T5276] plantronics 0003:047F:FFFF.0077: No inputs registered, leaving [ 1778.667567][T22214] usb usb3-port1: unable to enumerate USB device [ 1778.668502][ T5276] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1778.812091][ T5276] usb 5-1: USB disconnect, device number 24 [ 1779.031035][T32741] trusted_key: encrypted_key: insufficient parameters specified [ 1779.079461][T32741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1779.090287][T32741] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5750'. [ 1779.221766][T32743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5751'. [ 1779.477043][T32747] fuse: Unknown parameter 'user_i00000000000000000000' [ 1780.001433][T32756] FAULT_INJECTION: forcing a failure. [ 1780.001433][T32756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.028185][T32756] CPU: 1 UID: 0 PID: 32756 Comm: syz.4.5755 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1780.038641][T32756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1780.048805][T32756] Call Trace: [ 1780.052102][T32756] [ 1780.055056][T32756] dump_stack_lvl+0x241/0x360 [ 1780.059765][T32756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.064990][T32756] ? __pfx__printk+0x10/0x10 [ 1780.069611][T32756] ? snprintf+0xda/0x120 [ 1780.073882][T32756] should_fail_ex+0x3b0/0x4e0 [ 1780.078612][T32756] _copy_to_user+0x2f/0xb0 [ 1780.083048][T32756] simple_read_from_buffer+0xca/0x150 [ 1780.088449][T32756] proc_fail_nth_read+0x1e9/0x250 [ 1780.093494][T32756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.099056][T32756] ? rw_verify_area+0x55e/0x6f0 [ 1780.103931][T32756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.109496][T32756] vfs_read+0x201/0xbc0 [ 1780.113673][T32756] ? __pfx_lock_release+0x10/0x10 [ 1780.118726][T32756] ? __pfx_vfs_read+0x10/0x10 [ 1780.123441][T32756] ? __fget_files+0x3f3/0x470 [ 1780.128153][T32756] ? fdget_pos+0x24e/0x320 [ 1780.132598][T32756] ksys_read+0x183/0x2b0 [ 1780.136869][T32756] ? __pfx_ksys_read+0x10/0x10 [ 1780.141654][T32756] ? do_syscall_64+0x100/0x230 [ 1780.146444][T32756] ? do_syscall_64+0xb6/0x230 [ 1780.151152][T32756] do_syscall_64+0xf3/0x230 [ 1780.155678][T32756] ? clear_bhb_loop+0x35/0x90 [ 1780.160383][T32756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.166297][T32756] RIP: 0033:0x7f562937c93c [ 1780.170727][T32756] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1780.190353][T32756] RSP: 002b:00007f5628dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1780.198791][T32756] RAX: ffffffffffffffda RBX: 00007f5629535f80 RCX: 00007f562937c93c [ 1780.206773][T32756] RDX: 000000000000000f RSI: 00007f5628dff0a0 RDI: 0000000000000005 [ 1780.214765][T32756] RBP: 00007f5628dff090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.222764][T32756] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000001 [ 1780.230880][T32756] R13: 0000000000000000 R14: 00007f5629535f80 R15: 00007f562965fa28 [ 1780.238888][T32756] [ 1780.278379][ T5275] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1780.313819][ T5275] usb 2-1: USB disconnect, device number 74 [ 1780.334599][ T5275] usblp0: removed [ 1780.696952][ T1846] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1780.726726][T22214] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1780.817375][T28948] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1780.826715][ T5275] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1780.846694][ T1846] usb 5-1: Using ep0 maxpacket: 8 [ 1780.862850][ T1846] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1780.876685][T22214] usb 3-1: Using ep0 maxpacket: 8 [ 1780.882289][T22214] usb 3-1: no configurations [ 1780.891288][ T1846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.899745][T22214] usb 3-1: can't read configurations, error -22 [ 1780.907065][ T1846] usb 5-1: Product: syz [ 1780.911258][ T1846] usb 5-1: Manufacturer: syz [ 1780.915858][ T1846] usb 5-1: SerialNumber: syz [ 1780.924640][ T1846] usb 5-1: config 0 descriptor?? [ 1780.936552][ T1846] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1780.987683][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 1780.998351][T28948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.007509][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.009031][T28948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1781.032672][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.046836][T22214] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1781.058124][T28948] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1781.065975][ T5275] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1781.067784][T28948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.087763][T28948] usb 2-1: config 0 descriptor?? [ 1781.097191][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.104877][T28948] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1781.116312][ T5275] usb 4-1: config 0 descriptor?? [ 1781.140225][ T1846] gspca_sonixj: reg_w1 err -71 [ 1781.155338][ T1846] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1781.172256][ T1846] usb 5-1: USB disconnect, device number 25 [ 1781.228642][T22214] usb 3-1: Using ep0 maxpacket: 8 [ 1781.234463][T22214] usb 3-1: no configurations [ 1781.239374][T22214] usb 3-1: can't read configurations, error -22 [ 1781.245849][T22214] usb usb3-port1: attempt power cycle [ 1781.596922][T22214] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1781.637407][T22214] usb 3-1: Using ep0 maxpacket: 8 [ 1781.650671][T22214] usb 3-1: no configurations [ 1781.676811][T22214] usb 3-1: can't read configurations, error -22 [ 1781.816836][ T29] audit: type=1326 audit(1727188791.276:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=313 comm="syz.4.5764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f562937def9 code=0x0 [ 1781.931728][T22214] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1782.006765][T22214] usb 3-1: Using ep0 maxpacket: 8 [ 1782.016952][T22214] usb 3-1: no configurations [ 1782.021602][T22214] usb 3-1: can't read configurations, error -22 [ 1782.047240][T22214] usb usb3-port1: unable to enumerate USB device [ 1783.137145][ T1846] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1783.318101][ T1846] usb 5-1: Using ep0 maxpacket: 32 [ 1783.356232][ T1846] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 1783.368024][ T1846] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1783.427136][ T1846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1783.458752][ T1846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.501226][ T1846] usb 5-1: Product: syz [ 1783.529912][ T1846] usb 5-1: Manufacturer: syz [ 1783.549561][ T1846] usb 5-1: SerialNumber: syz [ 1783.630439][ T5278] usb 2-1: USB disconnect, device number 75 [ 1783.662717][ T324] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1783.891814][ T5275] usbhid 4-1:0.0: can't add hid device: -71 [ 1783.910299][ T5275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1783.963619][ T5275] usb 4-1: USB disconnect, device number 62 [ 1784.913481][ T343] FAULT_INJECTION: forcing a failure. [ 1784.913481][ T343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.927726][ T343] CPU: 0 UID: 0 PID: 343 Comm: syz.2.5773 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1784.937989][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1784.948049][ T343] Call Trace: [ 1784.951336][ T343] [ 1784.954276][ T343] dump_stack_lvl+0x241/0x360 [ 1784.958966][ T343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1784.964187][ T343] ? __pfx__printk+0x10/0x10 [ 1784.968786][ T343] ? __pfx_lock_release+0x10/0x10 [ 1784.973825][ T343] should_fail_ex+0x3b0/0x4e0 [ 1784.978519][ T343] _copy_from_user+0x2f/0xe0 [ 1784.983115][ T343] copy_msghdr_from_user+0xae/0x680 [ 1784.988334][ T343] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1784.994151][ T343] __sys_sendmsg+0x22d/0x380 [ 1784.998741][ T343] ? __pfx___sys_sendmsg+0x10/0x10 [ 1785.003854][ T343] ? __pfx_vfs_write+0x10/0x10 [ 1785.008661][ T343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1785.015095][ T343] ? do_syscall_64+0x100/0x230 [ 1785.019881][ T343] ? do_syscall_64+0xb6/0x230 [ 1785.024581][ T343] do_syscall_64+0xf3/0x230 [ 1785.029097][ T343] ? clear_bhb_loop+0x35/0x90 [ 1785.033784][ T343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.039697][ T343] RIP: 0033:0x7fd1ff97def9 [ 1785.044108][ T343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.063819][ T343] RSP: 002b:00007fd1ff7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1785.072246][ T343] RAX: ffffffffffffffda RBX: 00007fd1ffb35f80 RCX: 00007fd1ff97def9 [ 1785.080212][ T343] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1785.088186][ T343] RBP: 00007fd1ff7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.096173][ T343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.104160][ T343] R13: 0000000000000000 R14: 00007fd1ffb35f80 R15: 00007fd1ffc5fa28 [ 1785.112174][ T343] [ 1785.722543][ T5264] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1785.877009][ T1846] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1785.897327][ T1846] usb 5-1: USB disconnect, device number 26 [ 1785.918291][ T5264] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 1785.929357][ T5264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.945193][ T5264] usb 4-1: config 0 has no interface number 0 [ 1785.979492][ T5264] usb 4-1: config 0 interface 135 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1786.015961][ T1846] usblp0: removed [ 1786.063135][ T5264] usb 4-1: config 0 interface 135 has no altsetting 0 [ 1786.120709][ T5264] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=6a.2c [ 1786.162357][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.211226][ T5264] usb 4-1: Product: syz [ 1786.230245][ T5264] usb 4-1: Manufacturer: syz [ 1786.279189][ T5264] usb 4-1: SerialNumber: syz [ 1786.308417][ T987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.322106][ T5264] usb 4-1: config 0 descriptor?? [ 1786.632885][ T987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.809273][ T987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.970855][T21168] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1786.981867][T21168] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1786.997610][ T987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.016191][T21168] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1787.057428][T21168] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1787.065412][T21168] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1787.073850][T21168] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1787.365917][ T987] bridge_slave_1: left allmulticast mode [ 1787.396778][ T987] bridge_slave_1: left promiscuous mode [ 1787.409120][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.458818][ T987] bridge_slave_0: left allmulticast mode [ 1787.469033][ T987] bridge_slave_0: left promiscuous mode [ 1787.477388][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.645826][ T987] gretap0: left allmulticast mode [ 1787.695852][ T987] gretap0: left promiscuous mode [ 1787.896966][ T383] sock: sock_timestamping_bind_phc: sock not bind to device [ 1788.222498][ T5264] usb 4-1: USB disconnect, device number 63 [ 1788.757133][ T408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1788.774716][ T408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1788.806678][ T408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1788.836849][ T408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1789.047205][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1789.070639][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1789.090175][ T987] bond0 (unregistering): Released all slaves [ 1789.181369][T25803] Bluetooth: hci11: command tx timeout [ 1789.911788][ T446] dvmrp0: entered allmulticast mode [ 1789.930069][ T452] dvmrp0: left allmulticast mode [ 1790.004624][ T449] pim6reg: entered allmulticast mode [ 1790.117416][ T368] chnl_net:caif_netlink_parms(): no params data found [ 1790.182331][ T987] hsr_slave_0: left promiscuous mode [ 1790.197201][ T987] hsr_slave_1: left promiscuous mode [ 1790.240772][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1790.269785][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1790.299143][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1790.313263][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1790.379684][ T987] veth1_macvtap: left promiscuous mode [ 1790.385502][ T987] veth0_macvtap: left promiscuous mode [ 1790.403113][ T987] veth1_vlan: left promiscuous mode [ 1790.413883][ T987] veth0_vlan: left promiscuous mode [ 1791.257000][T25803] Bluetooth: hci11: command tx timeout [ 1791.646391][ T987] team0 (unregistering): Port device team_slave_1 removed [ 1791.712053][ T987] team0 (unregistering): Port device team_slave_0 removed [ 1791.908061][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.914774][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.273559][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.273627][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.273826][ T368] bridge_slave_0: entered allmulticast mode [ 1793.275090][ T368] bridge_slave_0: entered promiscuous mode [ 1793.282225][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.282359][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.282551][ T368] bridge_slave_1: entered allmulticast mode [ 1793.284920][ T368] bridge_slave_1: entered promiscuous mode [ 1793.336909][T25803] Bluetooth: hci11: command tx timeout [ 1793.384236][ T368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1793.413262][ T368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1793.608489][ T368] team0: Port device team_slave_0 added [ 1793.638284][ T368] team0: Port device team_slave_1 added [ 1793.727180][ T540] Unknown status report in ack skb [ 1793.738859][ T368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.738880][ T368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.738904][ T368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1793.798407][ T368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1793.798427][ T368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.798451][ T368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1794.018638][ T368] hsr_slave_0: entered promiscuous mode [ 1794.044523][ T368] hsr_slave_1: entered promiscuous mode [ 1794.051619][ T368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1794.080734][ T368] Cannot create hsr debugfs directory [ 1794.088294][ T554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1794.092849][ T549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1794.333412][ T551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.340947][ T551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.669222][ T551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.695107][ T551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.877806][ T572] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 1795.145235][ T551] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.154752][ T551] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.164626][ T551] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.175005][ T551] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.416840][T25803] Bluetooth: hci11: command tx timeout [ 1795.528004][ T586] netlink: 'syz.1.5856': attribute type 4 has an invalid length. [ 1795.578552][ T586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1795.615115][ T591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5858'. [ 1796.060357][ T604] kvm: pic: non byte read [ 1796.064921][ T604] kvm: pic: non byte read [ 1796.091505][ T604] kvm: pic: non byte read [ 1796.096049][ T604] kvm: pic: non byte read [ 1796.118122][ T604] kvm: pic: single mode not supported [ 1796.118201][ T604] kvm: pic: non byte read [ 1796.850455][ T368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1796.890691][ T368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1796.903419][ T368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1796.925522][ T368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1797.111601][ T368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.165086][ T368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.206294][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.213491][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1797.331240][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.338412][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1797.485168][ T368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.648041][ T368] veth0_vlan: entered promiscuous mode [ 1797.699388][ T368] veth1_vlan: entered promiscuous mode [ 1797.772773][ T368] veth0_macvtap: entered promiscuous mode [ 1797.807497][ T368] veth1_macvtap: entered promiscuous mode [ 1797.856267][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.894883][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.926043][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.946748][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.957695][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.968212][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.978314][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.988885][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.999932][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.011283][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.021180][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.031706][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.041624][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.052153][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.062409][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.072895][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.082792][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.094359][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.105104][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.115711][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.125645][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.136140][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.146339][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.157004][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.166884][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.177400][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.188929][ T368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.247489][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.258558][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.268719][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.279589][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.289782][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.302045][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.312996][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.323542][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.333418][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.343972][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.353849][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.364425][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.374373][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.385092][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.395013][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.406494][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.417274][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.427937][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.437841][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.448438][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.458520][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.469042][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.478975][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.489490][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.499405][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.510908][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.521733][ T368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.535423][ T368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.550944][ T368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.561635][ T368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.570397][ T368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.579153][ T368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.588065][ T368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.815347][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.835652][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.924780][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.932711][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.950178][ T706] syzkaller1: entered promiscuous mode [ 1798.968460][ T706] syzkaller1: entered allmulticast mode [ 1799.196184][ T696] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1800.151519][ C1] ------------[ cut here ]------------ [ 1800.157897][ C1] WARNING: CPU: 1 PID: 767 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1800.168826][ C1] Modules linked in: [ 1800.172764][ C1] CPU: 1 UID: 0 PID: 767 Comm: syz.3.5901 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1800.183164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1800.193309][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1800.200470][ C1] Code: 0f b6 dc 31 ff 89 de e8 35 a7 e9 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 18 a4 e9 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 0a a4 e9 f5 90 0f 0b 90 e9 99 e0 ff ff [ 1800.220177][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00010246 [ 1800.226277][ C1] RAX: ffffffff8bab0ff8 RBX: 00000000000055f0 RCX: ffff8880385f1e00 [ 1800.234365][ C1] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 1800.242412][ C1] RBP: 1ffff1100fda9c9e R08: ffffffff8baafff2 R09: 1ffff1100fda9ca8 [ 1800.250480][ C1] R10: dffffc0000000000 R11: ffffed100fda9ca9 R12: 0000000000000000 [ 1800.258522][ C1] R13: dffffc0000000000 R14: 000000001e6bbcb0 R15: 00000000000081e5 [ 1800.266551][ C1] FS: 00007f1d1cdd76c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1800.275568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1800.282258][ C1] CR2: 0000000020287000 CR3: 0000000038140000 CR4: 00000000003506f0 [ 1800.290298][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1800.298354][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1800.306350][ C1] Call Trace: [ 1800.309718][ C1] [ 1800.312586][ C1] ? __warn+0x168/0x4e0 [ 1800.316822][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1800.323318][ C1] ? report_bug+0x2b3/0x500 [ 1800.327920][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1800.334402][ C1] ? handle_bug+0x60/0x90 [ 1800.338817][ C1] ? exc_invalid_op+0x1a/0x50 [ 1800.343522][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 1800.348651][ C1] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 1800.355100][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1800.361618][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1800.368106][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1800.374618][ C1] mptcp_data_ready+0x29c/0xa90 [ 1800.379557][ C1] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 1800.385430][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 1800.390905][ C1] subflow_data_ready+0x34a/0x920 [ 1800.395985][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 1800.401617][ C1] ? tcp_grow_window+0x161/0xb00 [ 1800.406631][ C1] ? tcp_data_ready+0x15b/0x4e0 [ 1800.411519][ C1] tcp_data_queue+0x20fd/0x76c0 [ 1800.416425][ C1] ? tcp_urg+0x100/0x450 [ 1800.420874][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 1800.426107][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 1800.430808][ C1] ? ktime_get+0x9b/0xb0 [ 1800.435122][ C1] tcp_rcv_established+0xfba/0x2020 [ 1800.440446][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1800.446142][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1800.451273][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 1800.455905][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 1800.460569][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1800.465459][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1800.470398][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1800.475301][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 1800.480856][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 1800.486555][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 1800.492110][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1800.498198][ C1] NF_HOOK+0x3a4/0x450 [ 1800.502300][ C1] ? NF_HOOK+0x9a/0x450 [ 1800.506490][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1800.511195][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1800.517250][ C1] ? ip_rcv_finish+0x406/0x560 [ 1800.522085][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1800.527288][ C1] NF_HOOK+0x3a4/0x450 [ 1800.531389][ C1] ? __lock_acquire+0x1384/0x2050 [ 1800.536617][ C1] ? NF_HOOK+0x9a/0x450 [ 1800.540815][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1800.545430][ C1] ? ip_rcv_core+0x801/0xd10 [ 1800.550124][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1800.555273][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1800.559851][ C1] __netif_receive_skb+0x2bf/0x650 [ 1800.565030][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1800.570413][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1800.576116][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1800.582202][ C1] ? __pfx_lock_release+0x10/0x10 [ 1800.587320][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1800.592479][ C1] process_backlog+0x662/0x15b0 [ 1800.597447][ C1] ? process_backlog+0x33b/0x15b0 [ 1800.602518][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1800.607915][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1800.613935][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1800.620368][ C1] __napi_poll+0xcb/0x490 [ 1800.624797][ C1] net_rx_action+0x89b/0x1240 [ 1800.629579][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1800.634723][ C1] ? sched_clock+0x4a/0x70 [ 1800.639230][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1800.645599][ C1] handle_softirqs+0x2c5/0x980 [ 1800.650462][ C1] ? do_softirq+0x11b/0x1e0 [ 1800.655004][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1800.660387][ C1] do_softirq+0x11b/0x1e0 [ 1800.664755][ C1] [ 1800.667763][ C1] [ 1800.670720][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1800.675693][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1800.681431][ C1] ? rcu_is_watching+0x15/0xb0 [ 1800.686227][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1800.691545][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 1800.696897][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 1800.702038][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1800.707864][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 1800.713013][ C1] __dev_queue_xmit+0x1764/0x3e80 [ 1800.718120][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 1800.723262][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1800.728729][ C1] ? mark_lock+0x9a/0x360 [ 1800.733092][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1800.739168][ C1] ? ip_finish_output2+0xa14/0x1390 [ 1800.744393][ C1] ? ip_finish_output2+0x45f/0x1390 [ 1800.749689][ C1] ip_finish_output2+0xd41/0x1390 [ 1800.754748][ C1] ? ip_finish_output2+0x45f/0x1390 [ 1800.760046][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 1800.765533][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 1800.770483][ C1] ? __ip_finish_output+0x349/0x400 [ 1800.775721][ C1] __ip_queue_xmit+0x118c/0x1b80 [ 1800.780874][ C1] ? __pfx_mptcp_write_options+0x10/0x10 [ 1800.786661][ C1] ? __ip_queue_xmit+0x5f/0x1b80 [ 1800.791633][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1800.796841][ C1] __tcp_transmit_skb+0x2544/0x3b30 [ 1800.802099][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1800.807714][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1800.813728][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1800.820151][ C1] ? tcp_init_tso_segs+0xde/0x1a0 [ 1800.825209][ C1] tcp_write_xmit+0x641d/0x6bf0 [ 1800.830166][ C1] ? ipv4_mtu+0x2bc/0x3d0 [ 1800.834525][ C1] ? tcp_current_mss+0x29b/0x4d0 [ 1800.839545][ C1] ? __pfx_tcp_current_mss+0x10/0x10 [ 1800.844866][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 1800.850168][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 1800.855746][ C1] ? ktime_get+0x9b/0xb0 [ 1800.860089][ C1] tcp_rcv_established+0x1026/0x2020 [ 1800.865418][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1800.871938][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1800.877837][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 1800.882464][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 1800.887658][ C1] __release_sock+0x214/0x350 [ 1800.892382][ C1] release_sock+0x61/0x1f0 [ 1800.896908][ C1] __mptcp_push_pending+0x6b5/0x9f0 [ 1800.902155][ C1] ? __mptcp_push_pending+0x301/0x9f0 [ 1800.907607][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1800.913358][ C1] ? __virt_addr_valid+0x183/0x530 [ 1800.918536][ C1] ? __virt_addr_valid+0x183/0x530 [ 1800.923675][ C1] ? __virt_addr_valid+0x45f/0x530 [ 1800.928863][ C1] ? __check_object_size+0x48e/0x900 [ 1800.934274][ C1] mptcp_sendmsg+0x10bb/0x1b10 [ 1800.939144][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1800.944297][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 1800.949659][ C1] ? inet_sendmsg+0x330/0x390 [ 1800.954377][ C1] __sock_sendmsg+0x1a6/0x270 [ 1800.959144][ C1] __sys_sendto+0x39b/0x4f0 [ 1800.963689][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1800.968786][ C1] ? do_futex+0x392/0x560 [ 1800.973257][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1800.979325][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1800.985689][ C1] __x64_sys_sendto+0xde/0x100 [ 1800.990525][ C1] do_syscall_64+0xf3/0x230 [ 1800.995051][ C1] ? clear_bhb_loop+0x35/0x90 [ 1800.999742][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.005637][ C1] RIP: 0033:0x7f1d1bf7def9 [ 1801.010063][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1801.029770][ C1] RSP: 002b:00007f1d1cdd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1801.038209][ C1] RAX: ffffffffffffffda RBX: 00007f1d1c135f80 RCX: 00007f1d1bf7def9 [ 1801.046165][ C1] RDX: 00000000ffffff4c RSI: 0000000020000040 RDI: 0000000000000004 [ 1801.054149][ C1] RBP: 00007f1d1bff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1801.062127][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.070124][ C1] R13: 0000000000000000 R14: 00007f1d1c135f80 R15: 00007f1d1c25fa28 [ 1801.078119][ C1] [ 1801.081142][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1801.088410][ C1] CPU: 1 UID: 0 PID: 767 Comm: syz.3.5901 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1801.098733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1801.108769][ C1] Call Trace: [ 1801.112042][ C1] [ 1801.114956][ C1] dump_stack_lvl+0x241/0x360 [ 1801.119641][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1801.124822][ C1] ? __pfx__printk+0x10/0x10 [ 1801.129393][ C1] ? _printk+0xd5/0x120 [ 1801.133540][ C1] ? __init_begin+0x41000/0x41000 [ 1801.138555][ C1] ? vscnprintf+0x5d/0x90 [ 1801.142878][ C1] panic+0x349/0x880 [ 1801.146764][ C1] ? __warn+0x177/0x4e0 [ 1801.150909][ C1] ? __pfx_panic+0x10/0x10 [ 1801.155301][ C1] ? show_trace_log_lvl+0x3b2/0x410 [ 1801.160493][ C1] __warn+0x34b/0x4e0 [ 1801.164455][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1801.170855][ C1] report_bug+0x2b3/0x500 [ 1801.175163][ C1] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1801.181560][ C1] handle_bug+0x60/0x90 [ 1801.185695][ C1] exc_invalid_op+0x1a/0x50 [ 1801.190178][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1801.195012][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 1801.202030][ C1] Code: 0f b6 dc 31 ff 89 de e8 35 a7 e9 f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 18 a4 e9 f5 90 <0f> 0b 90 e9 47 ff ff ff e8 0a a4 e9 f5 90 0f 0b 90 e9 99 e0 ff ff [ 1801.221645][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00010246 [ 1801.227704][ C1] RAX: ffffffff8bab0ff8 RBX: 00000000000055f0 RCX: ffff8880385f1e00 [ 1801.235663][ C1] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 1801.243621][ C1] RBP: 1ffff1100fda9c9e R08: ffffffff8baafff2 R09: 1ffff1100fda9ca8 [ 1801.251576][ C1] R10: dffffc0000000000 R11: ffffed100fda9ca9 R12: 0000000000000000 [ 1801.259529][ C1] R13: dffffc0000000000 R14: 000000001e6bbcb0 R15: 00000000000081e5 [ 1801.267588][ C1] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 1801.274099][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1801.280521][ C1] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 1801.286950][ C1] mptcp_data_ready+0x29c/0xa90 [ 1801.291792][ C1] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 1801.297604][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 1801.302963][ C1] subflow_data_ready+0x34a/0x920 [ 1801.307980][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 1801.313596][ C1] ? tcp_grow_window+0x161/0xb00 [ 1801.318534][ C1] ? tcp_data_ready+0x15b/0x4e0 [ 1801.323373][ C1] tcp_data_queue+0x20fd/0x76c0 [ 1801.328216][ C1] ? tcp_urg+0x100/0x450 [ 1801.332443][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 1801.337634][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 1801.342206][ C1] ? ktime_get+0x9b/0xb0 [ 1801.346438][ C1] tcp_rcv_established+0xfba/0x2020 [ 1801.351628][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1801.357273][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1801.362289][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 1801.366867][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 1801.371385][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1801.376218][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1801.381073][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1801.385902][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 1801.391358][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 1801.396974][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 1801.402425][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1801.408384][ C1] NF_HOOK+0x3a4/0x450 [ 1801.412433][ C1] ? NF_HOOK+0x9a/0x450 [ 1801.416573][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1801.421168][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1801.427132][ C1] ? ip_rcv_finish+0x406/0x560 [ 1801.431882][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1801.436994][ C1] NF_HOOK+0x3a4/0x450 [ 1801.441048][ C1] ? __lock_acquire+0x1384/0x2050 [ 1801.446054][ C1] ? NF_HOOK+0x9a/0x450 [ 1801.450187][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1801.454758][ C1] ? ip_rcv_core+0x801/0xd10 [ 1801.459328][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1801.464422][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1801.468912][ C1] __netif_receive_skb+0x2bf/0x650 [ 1801.474008][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1801.479013][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 1801.484623][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1801.490589][ C1] ? __pfx_lock_release+0x10/0x10 [ 1801.495597][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1801.500698][ C1] process_backlog+0x662/0x15b0 [ 1801.505533][ C1] ? process_backlog+0x33b/0x15b0 [ 1801.510541][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1801.515804][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1801.521837][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1801.528186][ C1] __napi_poll+0xcb/0x490 [ 1801.532515][ C1] net_rx_action+0x89b/0x1240 [ 1801.537204][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1801.542315][ C1] ? sched_clock+0x4a/0x70 [ 1801.546730][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1801.553053][ C1] handle_softirqs+0x2c5/0x980 [ 1801.557804][ C1] ? do_softirq+0x11b/0x1e0 [ 1801.562289][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1801.567560][ C1] do_softirq+0x11b/0x1e0 [ 1801.571957][ C1] [ 1801.574866][ C1] [ 1801.577777][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1801.582609][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1801.588238][ C1] ? rcu_is_watching+0x15/0xb0 [ 1801.592995][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1801.598179][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 1801.603448][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 1801.608568][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1801.614295][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 1801.619401][ C1] __dev_queue_xmit+0x1764/0x3e80 [ 1801.624424][ C1] ? __dev_queue_xmit+0x2da/0x3e80 [ 1801.629519][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1801.634889][ C1] ? mark_lock+0x9a/0x360 [ 1801.639208][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1801.645182][ C1] ? ip_finish_output2+0xa14/0x1390 [ 1801.650388][ C1] ? ip_finish_output2+0x45f/0x1390 [ 1801.655582][ C1] ip_finish_output2+0xd41/0x1390 [ 1801.660594][ C1] ? ip_finish_output2+0x45f/0x1390 [ 1801.665782][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 1801.671304][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 1801.676151][ C1] ? __ip_finish_output+0x349/0x400 [ 1801.681379][ C1] __ip_queue_xmit+0x118c/0x1b80 [ 1801.686311][ C1] ? __pfx_mptcp_write_options+0x10/0x10 [ 1801.691951][ C1] ? __ip_queue_xmit+0x5f/0x1b80 [ 1801.696878][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1801.701983][ C1] __tcp_transmit_skb+0x2544/0x3b30 [ 1801.707187][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1801.712750][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1801.718718][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1801.725037][ C1] ? tcp_init_tso_segs+0xde/0x1a0 [ 1801.730047][ C1] tcp_write_xmit+0x641d/0x6bf0 [ 1801.734889][ C1] ? ipv4_mtu+0x2bc/0x3d0 [ 1801.739199][ C1] ? tcp_current_mss+0x29b/0x4d0 [ 1801.744119][ C1] ? __pfx_tcp_current_mss+0x10/0x10 [ 1801.749501][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 1801.754697][ C1] __tcp_push_pending_frames+0x9b/0x360 [ 1801.760222][ C1] ? ktime_get+0x9b/0xb0 [ 1801.764445][ C1] tcp_rcv_established+0x1026/0x2020 [ 1801.769726][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1801.776056][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1801.781674][ C1] tcp_v4_do_rcv+0x96d/0xc70 [ 1801.786251][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 1801.791376][ C1] __release_sock+0x214/0x350 [ 1801.796049][ C1] release_sock+0x61/0x1f0 [ 1801.800455][ C1] __mptcp_push_pending+0x6b5/0x9f0 [ 1801.805639][ C1] ? __mptcp_push_pending+0x301/0x9f0 [ 1801.810996][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1801.816710][ C1] ? __virt_addr_valid+0x183/0x530 [ 1801.821812][ C1] ? __virt_addr_valid+0x183/0x530 [ 1801.826907][ C1] ? __virt_addr_valid+0x45f/0x530 [ 1801.832010][ C1] ? __check_object_size+0x48e/0x900 [ 1801.837371][ C1] mptcp_sendmsg+0x10bb/0x1b10 [ 1801.842144][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1801.847329][ C1] ? sock_rps_record_flow+0x1a/0x400 [ 1801.852602][ C1] ? inet_sendmsg+0x330/0x390 [ 1801.857267][ C1] __sock_sendmsg+0x1a6/0x270 [ 1801.861934][ C1] __sys_sendto+0x39b/0x4f0 [ 1801.866426][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1801.871435][ C1] ? do_futex+0x392/0x560 [ 1801.875757][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1801.881729][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1801.888044][ C1] __x64_sys_sendto+0xde/0x100 [ 1801.892794][ C1] do_syscall_64+0xf3/0x230 [ 1801.897284][ C1] ? clear_bhb_loop+0x35/0x90 [ 1801.901953][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.907830][ C1] RIP: 0033:0x7f1d1bf7def9 [ 1801.912224][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1801.931809][ C1] RSP: 002b:00007f1d1cdd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1801.940206][ C1] RAX: ffffffffffffffda RBX: 00007f1d1c135f80 RCX: 00007f1d1bf7def9 [ 1801.948161][ C1] RDX: 00000000ffffff4c RSI: 0000000020000040 RDI: 0000000000000004 [ 1801.956111][ C1] RBP: 00007f1d1bff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1801.964062][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.972014][ C1] R13: 0000000000000000 R14: 00007f1d1c135f80 R15: 00007f1d1c25fa28 [ 1801.979978][ C1] [ 1801.983198][ C1] Kernel Offset: disabled [ 1801.987650][ C1] Rebooting in 86400 seconds..