last executing test programs: 42.144656428s ago: executing program 4 (id=3206): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x20042, 0x1}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002068101000000000000000020000200"], 0x14}}, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x402c5342, &(0x7f0000000500)) r4 = signalfd4(r3, &(0x7f0000000040)={[0x7, 0x10001]}, 0x8, 0x80800) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={0x0, 0xb0}, 0x1f, 0x7}, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000840)=[{0x81, 0x8, 0xa, 0x7}, {0x13, 0x3f, 0x8, 0x5}, {0x4009, 0xb1, 0x2, 0xff}, {0x3, 0xe9, 0x5, 0x1}, {0x1, 0x6, 0xa, 0x3}, {0xe512, 0xfa, 0x9, 0x5}, {0xffff, 0x7, 0x7, 0xfffff6d9}]}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async, rerun: 64) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r7, 0x0) (async) accept4$tipc(r4, &(0x7f00000001c0), &(0x7f0000000340)=0x10, 0x1800) syz_emit_ethernet(0x4a, &(0x7f00000012c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60083ff200140600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="440c000190780200"], 0x0) (async, rerun: 32) openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x600280, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r8, 0x2, r3, 0x7fff}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r8, 0x3, r0, 0x90b2, 0x80000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) (async) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f00000003c0)={0x0, 0x10a3, 0x1402, 0x0, 0x100000, 0x0, r11}, &(0x7f0000000240), &(0x7f0000000200)) write$rfkill(r11, &(0x7f00000000c0)={0x5, 0x4, 0x1, 0x1}, 0x8) 41.789262501s ago: executing program 4 (id=3208): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) syz_usb_connect$uac1(0x2, 0xb6, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a400030100301f0904000000010100000a24010000370002011d0d2406000003040000009c5c001124060006050000000000000000000000072405023fe2cc090401"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f00000000c0)={r2, r1, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x3c, 0x0, @empty, @mcast2, {[@routing={0x0, 0x0, 0xfc}]}}}}}, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) syz_usb_connect$uac1(0x2, 0xb6, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902a400030100301f0904000000010100000a24010000370002011d0d2406000003040000009c5c001124060006050000000000000000000000072405023fe2cc090401"], 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) (async) getpid() (async) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f00000000c0)={r2, r1, 0x1}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r4, 0xfff) (async) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x3c, 0x0, @empty, @mcast2, {[@routing={0x0, 0x0, 0xfc}]}}}}}, 0x0) (async) 40.827468521s ago: executing program 4 (id=3218): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x30314247}}) socket$inet_dccp(0x2, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x3e41}, &(0x7f0000ffb000), &(0x7f0000fff000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000180), 0x0) r4 = epoll_create(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a30000000000c0007800800084000000074050005000a000000050001000600000014000300686173683a6970"], 0x58}}, 0x0) syz_open_procfs(r5, &(0x7f00000002c0)='net/llc/core\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4c, &(0x7f0000000040), 0x4) r8 = socket$inet(0x2, 0x2, 0x73) add_key(&(0x7f0000000340)='dns_resolver\x00', 0x0, &(0x7f0000000180)="fb98", 0x2, 0xfffffffffffffffb) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x5) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="0047010000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="00216f0000006f00be8e0a4ee95b333262a83e61926b103972647d289a5338b5bdbf8a9b0f1466c43598f33cf397d356e57e85d0db093255d0656c951bd75b2684ab9612a1363ec7a2308c78f7cffd5f236b4ba5c957883158b6fd4e7579f456503bd600000000b7419e1fec5c86a366f7c2c99a7e"], &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="200e6d0000001d10a5e805ef929a3f936254f0d92c3f3ec7bf0077e8cbd8cf0f05168cdaef910101f6e4ac9c6e96232f07d93eb7a0e71d685d23326b0fb19937d0abad1b05538c26149212452edaf15cee0fcf93bffa120c394f9813137c1ff7dec0a94a9f6dd238ffa0ff9cf4758fb130ce5a"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x9, 0x5e, 0x5, 0x0, 0x1, 0x3, 0xbcb, 0x3, 0x57, 0x26, 0x71, 0x1ff}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x218500) ioctl$SG_SET_COMMAND_Q(r9, 0x2271, &(0x7f0000000040)=0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) 38.296509407s ago: executing program 4 (id=3233): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="52010000d54cb940ca0768a8c8a00000000109021200010200000009043002003892c500"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$alg(0x26, 0x5, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) unlink(&(0x7f0000000100)='./file0/file0\x00') (async) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x5}}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=ANY=[@ANYBLOB="5c0000002a00090000000000000000000400002c450011803cca935e56c61a30c6b6607f08fa86edc2bae6327cd7c70b7da0ceb90629d564b9b2efb874c42c75f4feff0f000061f75f74038b2779d648bdbb8d154dcea4930b0000002b565fc6f37af77958a071f39cdfa898f0ff27f1c744100ce9bda9819910ed06704fbfe8beede8a2894b1c73471345a0b91c795e61785d57a33c06c0265b9faf563cfc1a05128eeb380af88ae37ce13b88c44da35f9bda530db2c04ecb73b25a442932ec3f"], 0x5c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) (async) r7 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) (async) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x9b}}, './file0\x00'}) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x65c}) 37.280954515s ago: executing program 4 (id=3241): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='/dev/snd/seq\x00') write$sndseq(r0, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @control={0xfb}}], 0x1c) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@sr0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x22b7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000001c0)={0x1, @win={{0x0, 0x3, 0x1, 0x7}, 0x9, 0xfffffffd, &(0x7f0000000080)={{0x80000000, 0x9, 0x9, 0x6}}, 0x101, &(0x7f00000002c0)="de32b2493f060cbb9adf39a3a1695b532e886e1c013eaa41b94aec5823faa1bbbc3086728ac07fc57d2962dddd4c925f71f0f8403e0363cdf00476d0f95533cb872d54d68548a3d865db339e7510e778e4c24dd8e73dd5d6aaf874686166053bfcdc4a95631f6ba248747daede8615fc2b60c0be4dad526c7e796fea47b73d9bed9d78c364ba7acb0d154ea9bf67d62f850bfa4e7d4e5541d6da8fc3c62bdf2759c16a95c34b71c979a19e49fea384c77e4644e17b5988313713b95ac121156f87c9a8d6a40bb5da2927ef28a79a3154226ccff1ba", 0xa3}}) 36.8773816s ago: executing program 4 (id=3244): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x9000001d}) 35.070067285s ago: executing program 0 (id=3249): syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_io_uring_setup(0x7d9e, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) openat$loop_ctrl(0xffffff9c, &(0x7f0000000140), 0x220000, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) eventfd2(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$alg(0x26, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000020c0)={0x14, &(0x7f0000001fc0)=ANY=[@ANYBLOB='\x00\rf'], 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 31.980476634s ago: executing program 0 (id=3263): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7f61, 0x8, 0x80000001, 0x0, {{0x28, 0x4, 0x1, 0x33, 0xa0, 0x64, 0x0, 0x2, 0x0, 0x0, @multicast1, @loopback, {[@ssrr={0x89, 0x23, 0x8f, [@private=0xa010100, @multicast1, @local, @multicast1, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @noop, @end, @cipso={0x86, 0x38, 0x3, [{0x7, 0x10, "1b95317074bba8a510e8755b65af"}, {0x2, 0x12, "5b9a8f1bf93a8d17437a0094aaf89df4"}, {0x6, 0x2}, {0x1, 0x3, "8c"}, {0x0, 0xb, "a8e4abd376dad1745e"}]}, @timestamp={0x44, 0x8, 0x7d, 0x0, 0x0, [0x1]}, @ssrr={0x89, 0x7, 0x8d, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xe4, 0x1, 0x3, [{@multicast2, 0x8}, {@multicast1, 0x200}, {@private=0xa010101, 0x4ae6}]}]}}}}}) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041fee", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @multicast2}, &(0x7f00000001c0)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r8, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xd}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 30.973847244s ago: executing program 2 (id=3265): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x9000001d}) 30.859564891s ago: executing program 2 (id=3266): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) read$FUSE(r2, &(0x7f000001aa80)={0x2020}, 0xfffffffffffffde5) readv(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000043c0)=[{{&(0x7f0000001140)={0xa, 0x4e24, 0x0, @private2}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000011c0)="bc", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rdma_dest={0x18}], 0x18}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x10000001) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000380)=""/121, 0x79, 0x0, 0x0, 0x2}}, 0x48) syz_80211_inject_frame(&(0x7f0000000180), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000003064f25000000000000003c000000000500010007"], 0x28}}, 0x0) 29.357189178s ago: executing program 2 (id=3267): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000340)={0x5, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0xcfc}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40005) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x10b101, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d61630000"], 0x64}}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x8000002}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000003380)=ANY=[@ANYRESHEX=r4], 0x0) syz_usb_connect(0x0, 0x2ee, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 29.215704363s ago: executing program 0 (id=3269): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) close(r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) delete_module(&(0x7f0000000600)='\'$\xc7}\\\x00', 0xa00) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@remote, @private, 0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x680, 0x404001) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000100)=0x8, 0x4) delete_module(&(0x7f0000000140)='.(%\x00', 0xa00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x1, 0x2, 0x1}}, 0x26) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) r4 = syz_open_dev$vcsn(0x0, 0xfffffffb, 0x208100) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, &(0x7f0000000280)=0x8) r5 = dup(r2) mkdir(&(0x7f0000000380)='./file0\x00', 0x41) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000001640)=[{&(0x7f0000000400)=@in={0x2, 0x4e20, @rand_addr=0x640100fd}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000440)="4b00b7dd6a33dcbdcd16ecec4bed5589390b37c7c8aacfc1ae26b33b29c6a536548d5ee3ca059aefd71c7e58b4cb8e12d34847566abeb2b52176bcb355d47e1e8ac12044f47f3c9738127fd95a5ce694fbe2badbf204a569e80674b8824e4fe8b9b7f1bfd6bfa79e9445af29df94c79a5be9a637359142dba0ee5e05a89a5a54877b9c6eec5115ecf03487cb05b653f63e619f33ad0a055278580dd3ed95fb0844b392d6e98c836dc7e4eecf908eea37e92404698de40d6638292e9df48ed7a4dd776d8863091398adbd5ca26eee2a18d86e134117cf7e266de17ac0cf90131266bdbffc0b1771d341f5de7db523849a2ae1351a3f761dab", 0xf8}, {&(0x7f0000000540)="26000028c7f383211d8fdcbcb22a6a62a0d9d8f0deade1b7de01e8047d4571f4eb529a901906e149924332544d51a28c93f913a6ab2979ecb356553ad4f043aefb4ecc3e8fb0733422ad81896629455e1526b44b62625f9c10b2dd89fce4693b843c6bead75203422df715f7b91d4074dc0c54fdd5f093a008a85eb420ea727d7149518ad79a18bf02872260c9b4b96d0ad1", 0x92}, {&(0x7f0000000640)}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x4000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000001680)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e21, 0x4, @mcast1, 0x80}, 0xffffffffffffffff, 0x6a}}, 0x48) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000001740)={0x2, 0x7, 0xa, 0x7}, 0xa) syz_usb_connect$uac1(0x0, 0x115, &(0x7f0000000340)=ANY=[@ANYRES32=r1], &(0x7f0000001bc0)={0x0, 0x0, 0x59, &(0x7f0000000680)=ANY=[], 0x4, [{0x0, 0x0}, {0x85, &(0x7f0000000740)=@string={0x85, 0x3, "763a5727dcffa756ae3af66a5933b3596dd24458e0c3fe3eb91260e4a781219d208c3372c74ce7aa008a67c1a45bf25727d4f9580c08209355d2a7f95e7b25ef8c91aa56625e4bbe1bd59e7d64d854a6b38e83600b2f491044871bc52b515aee6bbe4d5c0b9a29a1e66f790eca41a804a6b46c87570cfef33fb72d8d445df3b0f55d8b"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x423}}, {0xcf, &(0x7f0000000640)=@string={0xcf, 0x3, "2a41bab5b9025778c02c7b98c049791f3aac3390aecb27947870de62eccc2caddefe2cfb3c1792deb16514264318b0ac99929696620261d0104790798781b8f0a219ddda11b6c4bf014aa025c198e931a627945802069b893a80d538da031d286905891c86b4912127394c794cb9f68b906674d6c70dac5d5356c161798441d1e4cfd59bb1ffcaca1afd324825777ffe4d136cc51afe3ec81c3e319e6a311184dded7349966661c0723dd6c594b721fa21b09298462e035cb6122ecc7ca4c31e69f7666c6fffbaaa20a1fe5a50"}}]}) write$binfmt_script(r4, 0x0, 0x0) 27.281093254s ago: executing program 3 (id=3277): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, "040000007a37f3ba00"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair(0x26, 0x80000, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r3, &(0x7f0000000180)=@isdn, &(0x7f0000000240)=0x80) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d65746100000000140002800800014000000011080002400000001a0900010073797a30000000000900020073797a3200000000800000001100010000000000000000000000000a"], 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r5, 0x0, 0x21, &(0x7f0000000000)={0x0, @local, @private}, &(0x7f0000003040)=0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') 27.200292353s ago: executing program 1 (id=3278): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1000}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0200000000", 0x41d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='devices.list\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='c', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r6}, &(0x7f0000001400)=""/86, 0x33, &(0x7f0000000140)={&(0x7f0000000100)={'blake2b-256\x00'}}) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x21}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x68}}, 0x4050) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) listen(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000085410000000000000000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a05264ea3371a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c2300006e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c91cde4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002480)={{0x0, 0x9, 0x54943ff3, 0x9, 0x6, 0x6, 0x6, 0x4, 0x6, 0x8, 0x2, 0x7fffffffffffffff, 0x4, 0x3, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000003480)={r8, r9, "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", "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"}) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 27.00479447s ago: executing program 1 (id=3279): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x101200, 0x8, 0x18}, 0x18) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x12, r2, 0x2d373000) set_mempolicy(0x0, &(0x7f0000000080), 0x3f) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x0) set_mempolicy(0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r5, 0xc008af12, &(0x7f00000001c0)) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) rmdir(0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000280)=0x46f1, 0x4) fchdir(r6) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0xc241, 0x0) listen(0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000), 0x4) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x8}) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x30) write$binfmt_script(r3, &(0x7f0000000080), 0x76e5467) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) 26.8732614s ago: executing program 3 (id=3280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x5a0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 26.652682946s ago: executing program 3 (id=3281): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r3, 0x80026101, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8400"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x14}}, @dstopts={{0x14, 0x29, 0x37, {0x32}}}], 0x28}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}}, 0x0) sendmsg(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x1ff, @loopback, 0x1, 0x2}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="574aa901c0bea8a18a882f9cea39458877999507b4f560143cc2745452694b4733d54004780a9a5942e62b9948a9859c8d0f717eb37dcdc5d4b71787a09c27aa481598d41108", 0x46}, {&(0x7f0000000300)="18639e41", 0x4}], 0x3, &(0x7f00000007c0)=[{0x54, 0x112, 0x10001, "86f1b1a1cdf4aedfb4d9ca83e9de49bbd6b39f3f5e84e240ab6d4aa140889055010ae3d73c5f689a5bbe297eedfaddd278f1c3af8e6e2e2a34a6150b577bef5398cda8b0d09a"}, {0x50, 0x0, 0x8001, "27b9516ca25192fc9776894c01d5d1131f2564cb26969bceb6bdb944c9b9978e2e9e677ff53bc88a50dc7ee41795c66d21d58ef02be661a48217976906fdd29424ce"}, {0x60, 0x1, 0x37f, "024148892bfc10736d688c19a82d4364951dc96c0402de736444fd19f45e42cf2a3e10129c52833bfdebfb7dc39c9ab5fb15f886b12fdcd3f4ded9dbc575fdcbbe3f60dab97fb1db3888aa15f7a7d7dbccdf"}], 0x104}, 0x20000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) 24.791583241s ago: executing program 1 (id=3282): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000000000000000000000095007600000011a4eb1da5c3eaf2cc4e7e6a395c2ba5a79debbeeebd51f3ff7d3bf9f2817a231cb15bbbd61b81c86d3b29b9a5c853f8"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200037800b001144c5b11b1bb3d60000080002"], 0x48}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf74", 0x49, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 20.201830957s ago: executing program 3 (id=3283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2d4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x254, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x70, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1d0, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_connmark={0x94, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x2b, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d95"}, {0xc}, {0xc}}}]}]}}]}, 0x2d4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000040ff6943b80000000800000014f200000000861f2cbf86f474fad8cb594ed9fabe9ec277bb8d00"/60, 0x3c, r1) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 20.120853624s ago: executing program 2 (id=3284): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000075e000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00006a3000/0x1000)=nil) mremap(&(0x7f000054d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00003af000/0x2000)=nil) munmap(&(0x7f0000652000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, 0x0) mremap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f00005fe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x604, 0x11, r0, 0x0) 20.062565094s ago: executing program 0 (id=3285): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r0, 0x84, 0x64, 0x0, 0x0) 18.865415563s ago: executing program 3 (id=3286): r0 = epoll_create(0x10000e9) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x9000001d}) 18.687284358s ago: executing program 0 (id=3287): syz_emit_ethernet(0x7a, &(0x7f0000002380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "d15cdc", 0x44, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0xfffffff5, {{0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3}, 0x1, {0x100005}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x5, 0x2, 0x0, 0x3, 0x7, 0x6}, 0x2, {0x7, 0x3, 0x2, 0x2, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 18.530661061s ago: executing program 2 (id=3288): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x4, "e509b831"}, 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0008000003"], 0x48}, 0x2}, 0x0) 18.448457938s ago: executing program 3 (id=3289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = dup(r0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0xa000, 0x0) read$snapshot(r6, &(0x7f00000000c0)=""/169, 0xa9) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009050b0000000000000905ece2"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) 18.242329127s ago: executing program 0 (id=3290): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r2 = creat(&(0x7f00000002c0)='./file1\x00', 0x4) landlock_restrict_self(r2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@dev, @private, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_dellink={0x3c, 0x11, 0x2, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x50000, 0x420}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x41c042, 0x181, 0x28}, 0x18) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000001c0)="a3d3c64a4143beb704ec4639364a8355f3eeeb75708a14bc4e742288dc500634ccefd050841b499c1d4536985ae0a0ad584ca1303f9924460901103facb21657df8ce9d545535925c29f6256a0bd1cc106c9cc0abaf7bbf8ef66dc16d019dc1e09d2b6eae1e8e8da8d388984fe97656269cc99e00d6982ecb64ff176da882c1b82f6f4a17e43256229d625d71322c2897466eb1a0f651c8bfac13df8866196cf8b56e670d30c15e0f11500d47092457c4b846620ad72a0f6a4e33a4c0f7ced3930b623cdcda12606b1d724522b1201c74282c43fcc0c6bba8bef0db250330317f00de4cbb468355d6e9ec565f4bc71b4", 0xf0, 0x44885, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000001500), 0x588, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220700000019c1935a521589"], 0x0}, 0x0) 16.338205053s ago: executing program 1 (id=3291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000ac0)=""/4095, 0xfff}], 0x1, 0xfffffffd, 0x0) r1 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x104, 0x0) mq_getsetattr(r1, 0x0, &(0x7f0000000380)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) preadv2(r2, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020007000000e71a0800000001000000800000007f0354c7ef4f9c2e6a63", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000b1401000000000042c6c0647ff08f2b5754feb8ab8ac5000c000008000100000000004e"], 0x28}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000c002b80080003000e00000008000a00", @ANYBLOB="2397663cd0d52c27815e65e295af3c28a3bac1e2491ada10f1429a534b1565e1c3c2b3604ff3ae9791b1a1cc49a5a7883856193e90be30a3812fe18f5bcda99dfcfdbb08d49acbd4808698489a5cdeffa96a881c8878856b5a5f5c7400cf222055f2aeea8f2f9efa0d4d83f7b4a4800814fff2d381beb10bea12ccb9a867e30d0762b8c1107314544f958add5c7352f2a81558"], 0x34}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000000)=""/2, &(0x7f0000003fc0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xd7, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902c50003010000000904000000010100000a2401000000020102132406000006000000000000000000000000000924030000000000000924050000c206040409240300010300044006240504"], 0x0) 16.066685898s ago: executing program 2 (id=3292): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r3, 0x80026101, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8400"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x14}}, @dstopts={{0x14, 0x29, 0x37, {0x32}}}], 0x28}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}}, 0x0) sendmsg(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x1ff, @loopback, 0x1, 0x2}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="574aa901c0bea8a18a882f9cea39458877999507b4f560143cc2745452694b4733d54004780a9a5942e62b9948a9859c8d0f717eb37dcdc5d4b71787a09c27aa481598d41108", 0x46}, {&(0x7f0000000300)="18639e41", 0x4}], 0x3, &(0x7f00000007c0)=[{0x54, 0x112, 0x10001, "86f1b1a1cdf4aedfb4d9ca83e9de49bbd6b39f3f5e84e240ab6d4aa140889055010ae3d73c5f689a5bbe297eedfaddd278f1c3af8e6e2e2a34a6150b577bef5398cda8b0d09a"}, {0x50, 0x0, 0x8001, "27b9516ca25192fc9776894c01d5d1131f2564cb26969bceb6bdb944c9b9978e2e9e677ff53bc88a50dc7ee41795c66d21d58ef02be661a48217976906fdd29424ce"}, {0x60, 0x1, 0x37f, "024148892bfc10736d688c19a82d4364951dc96c0402de736444fd19f45e42cf2a3e10129c52833bfdebfb7dc39c9ab5fb15f886b12fdcd3f4ded9dbc575fdcbbe3f60dab97fb1db3888aa15f7a7d7dbccdf"}], 0x104}, 0x20000000) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @multicast}, 0x10) 8.804898514s ago: executing program 1 (id=3293): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000340)={0x5, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0xcfc}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40005) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x10b101, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d61630000"], 0x64}}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x8000002}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000003380)=ANY=[@ANYRESHEX=r4], 0x0) syz_usb_connect(0x0, 0x2ee, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=3297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000000500300000000000050029000000000008000300", @ANYRES32=r2, @ANYBLOB="15e6a67fb9d3ee3207bf4888c74f94576e7fcab471d03d383448afc8e0126845e34f7df38eb1f1530000000000000000f5c283bfc2172c9d397ce1effd89baeeb04f2c60991358f26c009e63515007af53cbfaf8936fc09627093455be40d3a47a431f51b893520bcc5e7a3d401882820ae5b01e595d25be330a1eefdc3a9d82fe0d49773f77185a8f8bfe6fbe10aa9bfaf4448d282b965ac1e1aef3bd2b5fa6078272fbf07e98b8b6caf00bd28c52c4670b359fac91e7"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) kernel console output (not intermixed with test programs): und, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 918.513985][T15588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.739941][ T5281] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 918.789657][T17815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.810537][ T5284] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 918.983934][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 918.991383][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 919.001531][ T9680] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 919.016541][ T9680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.021785][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 919.028001][ T9680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.050306][ T5281] usb 4-1: device descriptor read/64, error -71 [ 919.056704][ T9680] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 919.071039][ T9680] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 919.080492][ T9680] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 919.088880][ T9680] usb 2-1: Manufacturer: syz [ 919.093484][ T5284] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 919.093561][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.093586][ T5284] usb 3-1: Product: syz [ 919.093605][ T5284] usb 3-1: Manufacturer: syz [ 919.093622][ T5284] usb 3-1: SerialNumber: syz [ 919.135425][ T9680] usb 2-1: config 0 descriptor?? [ 919.135877][ T5284] usb 3-1: config 0 descriptor?? [ 919.160213][ T5281] usb usb4-port1: attempt power cycle [ 919.249990][ T5280] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 919.392258][T17821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.401481][T17821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.409913][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 919.427803][ T5280] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.443463][ T5280] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 919.452939][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.461710][ T5280] usb 1-1: Product: syz [ 919.466069][ T5280] usb 1-1: Manufacturer: syz [ 919.470857][ T5280] usb 1-1: SerialNumber: syz [ 919.478132][ T5280] usb 1-1: config 0 descriptor?? [ 919.485981][ T5280] usb 1-1: bad CDC descriptors [ 919.500192][ T5281] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 919.540935][ T5281] usb 4-1: device descriptor read/8, error -71 [ 919.552759][T17811] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 919.577671][ T9680] usbhid 2-1:0.0: can't add hid device: -71 [ 919.592498][ T9680] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 919.607618][ T9680] usb 2-1: USB disconnect, device number 91 [ 919.693101][T17827] ip6t_rpfilter: unknown options [ 919.699332][ T9870] usb 1-1: USB disconnect, device number 68 [ 919.779885][ T5281] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 919.822343][ T5281] usb 4-1: device descriptor read/8, error -71 [ 919.940217][ T5281] usb usb4-port1: unable to enumerate USB device [ 919.954899][ T9870] usb 3-1: USB disconnect, device number 106 [ 920.649894][ T5281] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 920.802467][ T5281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.822492][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.846727][ T5281] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 920.868568][ T5281] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.893955][ T5281] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.899201][T15588] usb 5-1: string descriptor 0 read error: -71 [ 920.911308][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.921911][T15588] usb 5-1: USB disconnect, device number 65 [ 920.932295][ T5281] usb 2-1: Product: syz [ 920.936663][ T5281] usb 2-1: Manufacturer: syz [ 920.973467][ T5281] usb 2-1: SerialNumber: syz [ 921.066508][T17847] netlink: 'syz.4.3076': attribute type 30 has an invalid length. [ 921.183592][T17844] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 921.210841][T17836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 921.487016][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.686269][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.858567][T17836] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 921.895843][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.049034][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.082765][ T5281] cdc_ncm 2-1:1.0: bind() failure [ 922.100594][T15588] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 922.104325][ T5281] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 922.129579][ T5281] cdc_ncm 2-1:1.1: bind() failure [ 922.277286][T15588] usb 5-1: Using ep0 maxpacket: 32 [ 922.300208][T15588] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 922.309378][T15588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.321557][T15588] usb 5-1: config 0 descriptor?? [ 922.327327][T14056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 922.343194][T15588] gspca_main: sunplus-2.14.0 probing 041e:400b [ 922.349544][T14056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 922.360645][T14056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 922.371969][T14056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 922.399222][T14056] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 922.407255][T14056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 922.423454][ T11] bridge_slave_0: left allmulticast mode [ 922.429381][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.556614][T17873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.589877][T15588] gspca_sunplus: reg_w_riv err -71 [ 922.593550][ T5281] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 922.601865][T15588] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 922.622777][T17873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.642297][T15588] usb 5-1: USB disconnect, device number 66 [ 922.800210][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 922.832825][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.850035][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.867208][ T5281] usb 1-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 922.877138][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.893472][ T5281] usb 1-1: config 0 descriptor?? [ 922.899827][ T9680] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 923.118090][ T9680] usb 4-1: config 97 has an invalid interface descriptor of length 3, skipping [ 923.132208][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.138370][ T9680] usb 4-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 923.163834][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.164950][ T9680] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 923.185384][ T11] bond0 (unregistering): Released all slaves [ 923.193220][ T9680] usb 4-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 923.209815][ T9680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.442555][T17873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.486250][T15588] usb 2-1: USB disconnect, device number 92 [ 923.534432][ T5281] usbhid 1-1:0.0: can't add hid device: -71 [ 923.540744][ T5281] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 923.556092][ T5281] usb 1-1: USB disconnect, device number 69 [ 923.754235][T17889] trusted_key: encrypted_key: insufficient parameters specified [ 923.850030][T11573] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 923.919448][T17874] chnl_net:caif_netlink_parms(): no params data found [ 924.109972][T11573] usb 5-1: Using ep0 maxpacket: 8 [ 924.117079][T11573] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.129202][ T11] hsr_slave_0: left promiscuous mode [ 924.131923][T11573] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 924.144274][ T11] hsr_slave_1: left promiscuous mode [ 924.163019][T11573] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.171399][T11573] usb 5-1: Product: syz [ 924.175879][T11573] usb 5-1: Manufacturer: syz [ 924.180710][T11573] usb 5-1: SerialNumber: syz [ 924.180792][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.194647][T11573] usb 5-1: config 0 descriptor?? [ 924.210728][T11573] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 924.213940][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.216947][T11573] usb 5-1: selecting invalid altsetting 1 [ 924.251981][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.274667][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.307612][ T11] veth1_macvtap: left promiscuous mode [ 924.313641][ T11] veth0_macvtap: left promiscuous mode [ 924.333895][ T11] veth1_vlan: left promiscuous mode [ 924.339268][ T11] veth0_vlan: left promiscuous mode [ 924.424274][T11573] gspca_stk014: init reg: 0x00 [ 924.429541][T11573] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 924.556840][T14056] Bluetooth: hci2: command tx timeout [ 925.104722][T14056] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 925.576538][ T9680] usb 4-1: string descriptor 0 read error: -71 [ 925.604793][ T9680] usb 4-1: USB disconnect, device number 77 [ 925.673729][ T11] team0 (unregistering): Port device team_slave_1 removed [ 925.751377][ T11] team0 (unregistering): Port device team_slave_0 removed [ 926.473079][T17920] bridge_slave_0: left allmulticast mode [ 926.490233][T17920] bridge_slave_0: left promiscuous mode [ 926.506596][T17920] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.630051][T14056] Bluetooth: hci2: command tx timeout [ 926.642938][T15588] usb 5-1: USB disconnect, device number 67 [ 926.660002][T17874] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.667184][T17874] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.720936][T17874] bridge_slave_0: entered allmulticast mode [ 926.759514][T17874] bridge_slave_0: entered promiscuous mode [ 926.763969][T17931] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 926.835472][T17874] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.882569][T17874] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.906818][T17874] bridge_slave_1: entered allmulticast mode [ 926.934045][T17874] bridge_slave_1: entered promiscuous mode [ 927.070100][ T9870] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 927.081230][T17874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.117391][T17874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.228314][T17874] team0: Port device team_slave_0 added [ 927.238724][T17874] team0: Port device team_slave_1 added [ 927.250711][ T9870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.300086][ T9870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.344629][ T9870] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 927.374787][ T9870] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.415891][T17874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.420305][ T9870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.448855][ T9870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.449805][T17874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.475087][ T9870] usb 4-1: Product: syz [ 927.511091][T17874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.524899][ T9870] usb 4-1: Manufacturer: syz [ 927.529625][ T9870] usb 4-1: SerialNumber: syz [ 927.565603][T17948] trusted_key: encrypted_key: insufficient parameters specified [ 927.586338][T17874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.609065][T17874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.699335][T17874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.784816][T17936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 927.852644][T17874] hsr_slave_0: entered promiscuous mode [ 927.869181][T17874] hsr_slave_1: entered promiscuous mode [ 927.876049][T17874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.888379][T17874] Cannot create hsr debugfs directory [ 928.012755][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.055345][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.132922][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 928.182528][T17965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.425731][T17936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 928.646210][ T9870] cdc_ncm 4-1:1.0: bind() failure [ 928.664859][ T9870] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 928.688592][ T9870] cdc_ncm 4-1:1.1: bind() failure [ 928.710791][T14056] Bluetooth: hci2: command tx timeout [ 928.906057][T17990] binder: 17984:17990 ioctl c0306201 20000580 returned -14 [ 928.988517][T17874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 929.010979][T17874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 929.034929][T17874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 929.057223][T17874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 929.251208][T17874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.288624][T17874] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.303839][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.311116][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.362158][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.369380][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.535758][T17874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.643296][T17874] veth0_vlan: entered promiscuous mode [ 929.715813][T17874] veth1_vlan: entered promiscuous mode [ 929.821404][T17874] veth0_macvtap: entered promiscuous mode [ 929.844708][T17874] veth1_macvtap: entered promiscuous mode [ 929.888429][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 929.933484][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.948244][ T5280] usb 4-1: USB disconnect, device number 78 [ 929.951806][ T9680] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 929.975059][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.000957][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.024673][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.046253][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.058907][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.081888][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.103232][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.126926][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.138870][ T9680] usb 5-1: device descriptor read/64, error -71 [ 930.196794][T17874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.309200][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.345809][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.367785][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.381860][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.392940][ T9680] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 930.400766][T18023] sctp: [Deprecated]: syz.3.3112 (pid 18023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 930.400766][T18023] Use struct sctp_sack_info instead [ 930.428466][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.439414][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.449608][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.460456][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.470534][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.481629][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.491839][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.502411][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.512334][T17874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.522946][T17874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.534325][T17874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.544785][T17874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.554324][T17874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.563480][T17874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.572495][T17874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.597687][T18025] hsr0: entered promiscuous mode [ 930.709243][T18025] hsr0: left promiscuous mode [ 930.800833][T14056] Bluetooth: hci2: command tx timeout [ 930.855598][T18034] trusted_key: encrypted_key: insufficient parameters specified [ 931.029453][ T7267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.059761][ T7267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.072369][ T9680] usb 5-1: device descriptor read/64, error -71 [ 931.143116][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.151337][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.194150][ T9680] usb usb5-port1: attempt power cycle [ 931.450338][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.468907][T18054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3118'. [ 931.475466][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.505128][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 931.524754][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.542572][T18054] bridge_slave_1: left allmulticast mode [ 931.550379][ T9680] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 931.567068][T18054] bridge_slave_1: left promiscuous mode [ 931.578641][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.594346][ T9680] usb 5-1: device descriptor read/8, error -71 [ 931.832005][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.832077][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.845175][ T9870] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 931.849929][ T9680] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 931.870453][ T9680] usb 5-1: device descriptor read/8, error -71 [ 931.980806][ T9680] usb usb5-port1: unable to enumerate USB device [ 932.010028][ T9870] usb 1-1: Using ep0 maxpacket: 16 [ 932.021925][ T9870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.021961][ T9870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.029396][ T9870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.029434][ T9870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.029460][ T9870] usb 1-1: Product: syz [ 932.029479][ T9870] usb 1-1: Manufacturer: syz [ 932.029497][ T9870] usb 1-1: SerialNumber: syz [ 932.236530][ T9870] usb 1-1: 0:2 : does not exist [ 932.263638][ T9870] usb 1-1: USB disconnect, device number 70 [ 932.324551][ T9700] udevd[9700]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.532949][T18082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3121'. [ 932.574049][T18082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.704191][T18082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.900266][ T9870] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 932.973480][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'. [ 933.083691][ T9870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.130486][T18106] netlink: zone id is out of range [ 933.135862][ T9870] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 933.167200][T18106] netlink: zone id is out of range [ 933.175662][T15588] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 933.183758][ T9870] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 933.199365][T18106] netlink: zone id is out of range [ 933.217426][T18106] netlink: zone id is out of range [ 933.223275][T18106] netlink: zone id is out of range [ 933.224881][ T9870] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 933.258507][T18106] netlink: zone id is out of range [ 933.264708][T18106] netlink: zone id is out of range [ 933.286024][T18106] netlink: zone id is out of range [ 933.293554][ T9870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 933.312078][ T9870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.321211][T18106] netlink: zone id is out of range [ 933.345991][ T9870] usb 2-1: Product: syz [ 933.362744][T15588] usb 4-1: Using ep0 maxpacket: 16 [ 933.375878][ T9870] usb 2-1: Manufacturer: syz [ 933.381281][T18106] netlink: zone id is out of range [ 933.388177][ T9870] usb 2-1: SerialNumber: syz [ 933.394921][T15588] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 933.432220][T15588] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 933.441822][T15588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.481265][T15588] usb 4-1: Product: syz [ 933.540644][T15588] usb 4-1: Manufacturer: syz [ 933.548770][T15588] usb 4-1: SerialNumber: syz [ 933.619134][T18091] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 933.636337][T15588] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input79 [ 933.901386][T11573] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 933.949661][T14056] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 933.993788][ T4667] bcm5974 4-1:1.0: could not read from device [ 934.031329][ T4667] bcm5974 4-1:1.0: could not read from device [ 934.072039][T11573] usb 3-1: device descriptor read/64, error -71 [ 934.084928][T15588] usb 4-1: USB disconnect, device number 79 [ 934.088845][ T4667] bcm5974 4-1:1.0: could not read from device [ 934.114120][ T4667] bcm5974 4-1:1.0: could not read from device [ 934.240136][T18091] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 934.359204][T11573] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 934.463842][ T9870] cdc_ncm 2-1:1.0: bind() failure [ 934.481099][ T9870] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 934.487990][ T9870] cdc_ncm 2-1:1.1: bind() failure [ 934.509904][T11573] usb 3-1: device descriptor read/64, error -71 [ 934.550336][T14056] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 934.559300][T14056] Bluetooth: hci5: Injecting HCI hardware error event [ 934.569375][ T5231] Bluetooth: hci5: hardware error 0x00 [ 934.620766][T11573] usb usb3-port1: attempt power cycle [ 934.670643][ T5281] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 934.712331][T18138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.727608][T18138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.749380][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3134'. [ 934.771489][T18138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.842319][ T5281] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.852720][ T5281] usb 5-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 934.875991][ T5281] usb 5-1: config 0 interface 0 has no altsetting 0 [ 934.888741][ T5281] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00 [ 934.907655][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.926947][ T5281] usb 5-1: config 0 descriptor?? [ 935.052014][T11573] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 935.090857][T11573] usb 3-1: device descriptor read/8, error -71 [ 935.340002][T11573] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 935.371528][T11573] usb 3-1: device descriptor read/8, error -71 [ 935.440398][T18116] coredump: 100(syz.0.3128): written to core: VMAs: 31, size 97292288; core: 59975042 bytes, pos 97300480 [ 935.472346][ T5281] usb 5-1: string descriptor 0 read error: -71 [ 935.501779][T11573] usb usb3-port1: unable to enumerate USB device [ 935.510880][ T5281] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input80 [ 935.545322][ T4667] bcm5974 5-1:0.0: could not read from device [ 935.561841][ T5281] usb 5-1: USB disconnect, device number 72 [ 935.568361][ T9703] bcm5974 5-1:0.0: could not read from device [ 935.599647][ T4667] bcm5974 5-1:0.0: could not read from device [ 935.619027][ T9703] udevd[9703]: Error opening device "/dev/input/event4": No such device [ 935.629374][ T9703] udevd[9703]: Unable to EVIOCGABS device "/dev/input/event4" [ 935.650064][ T9703] udevd[9703]: Unable to EVIOCGABS device "/dev/input/event4" [ 935.657711][ T9703] udevd[9703]: Unable to EVIOCGABS device "/dev/input/event4" [ 935.670658][ T9703] udevd[9703]: Unable to EVIOCGABS device "/dev/input/event4" [ 935.678227][ T9703] udevd[9703]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 935.692070][ T9703] coredump: 9703(udevd): over coredump resource limit, skipping core dump [ 935.707219][ T9703] coredump: 9703(udevd): coredump has not been created, error -7 [ 935.728760][ T4682] udevd[4682]: worker [9703] terminated by signal 6 (Aborted) [ 935.739036][ T4682] udevd[4682]: worker [9703] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input80/event4' [ 935.748399][T11573] usb 2-1: USB disconnect, device number 93 [ 936.176241][T18149] tipc: Started in network mode [ 936.185372][T18149] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 936.200560][T18149] tipc: Enabling of bearer rejected, failed to enable media [ 936.221286][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'. [ 936.259967][T11573] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 936.440117][T11573] usb 2-1: Using ep0 maxpacket: 8 [ 936.449398][T11573] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 936.457895][T11573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.467777][T11573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 936.471444][T15588] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 936.481394][T11573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 936.495431][T11573] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.508825][T11573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 936.519162][T11573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.626138][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.638271][ T5231] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 936.660752][T15588] usb 1-1: Using ep0 maxpacket: 16 [ 936.671954][T15588] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.692619][T15588] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.713396][T15588] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 936.739462][T15588] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.755060][T15588] usb 1-1: Product: syz [ 936.763336][T15588] usb 1-1: Manufacturer: syz [ 936.768190][T15588] usb 1-1: SerialNumber: syz [ 936.782585][T11573] usb 2-1: usb_control_msg returned -32 [ 936.788230][T11573] usbtmc 2-1:16.0: can't read capabilities [ 936.851030][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.967879][T18157] FAULT_INJECTION: forcing a failure. [ 936.967879][T18157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.985925][T18157] CPU: 1 UID: 0 PID: 18157 Comm: syz.2.3142 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 936.996416][T18157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 937.006602][T18157] Call Trace: [ 937.008270][T15588] usb 1-1: 0:2 : does not exist [ 937.009893][T18157] [ 937.009908][T18157] dump_stack_lvl+0x241/0x360 [ 937.009949][T18157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.009981][T18157] ? __pfx__printk+0x10/0x10 [ 937.010012][T18157] ? __pfx_lock_release+0x10/0x10 [ 937.010045][T18157] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 937.010075][T18157] ? get_synthdev+0x117/0x2c0 [ 937.010109][T18157] should_fail_ex+0x3b0/0x4e0 [ 937.010150][T18157] _copy_from_user+0x2f/0xe0 [ 937.041376][T15588] usb 1-1: USB disconnect, device number 71 [ 937.043418][T18157] snd_seq_oss_write+0x5a9/0xbb0 [ 937.068302][T18157] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 937.073828][T18157] ? common_file_perm+0x1a6/0x210 [ 937.078905][T18157] ? bpf_lsm_file_permission+0x9/0x10 [ 937.083560][ T9700] udevd[9700]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.084306][T18157] ? security_file_permission+0x74/0x280 [ 937.105685][T18157] odev_write+0x5b/0x80 [ 937.109880][T18157] ? __pfx_odev_write+0x10/0x10 [ 937.114772][T18157] vfs_write+0x29c/0xc90 [ 937.119074][T18157] ? __pfx_vfs_write+0x10/0x10 [ 937.123891][T18157] ? __fget_files+0x29/0x470 [ 937.128526][T18157] ? __fget_files+0x3f3/0x470 [ 937.133257][T18157] ? __fget_files+0x29/0x470 [ 937.137896][T18157] ? __fdget_pos+0x19a/0x320 [ 937.142616][T18157] ksys_write+0x1a0/0x2c0 [ 937.147005][T18157] ? __pfx_ksys_write+0x10/0x10 [ 937.151914][T18157] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 937.158558][T18157] ? lockdep_hardirqs_on+0x99/0x150 [ 937.163820][T18157] __do_fast_syscall_32+0xb4/0x110 [ 937.168983][T18157] ? exc_page_fault+0x590/0x8c0 [ 937.173876][T18157] do_fast_syscall_32+0x34/0x80 [ 937.178759][T18157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.185137][T18157] RIP: 0023:0xf7f47579 [ 937.189241][T18157] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 937.195137][T18159] netlink: 121544 bytes leftover after parsing attributes in process `syz.1.3136'. [ 937.208876][T18157] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 937.208913][T18157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 937.208931][T18157] RDX: 0000000000000232 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.208946][T18157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.208961][T18157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 937.208982][T18157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.209011][T18157] [ 937.276170][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.394282][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.592944][T14056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 937.604845][T14056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 937.615389][T14056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 937.626456][T14056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 937.635867][T14056] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 937.651627][ T53] bridge_slave_1: left allmulticast mode [ 937.658252][T14056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 937.665711][ T53] bridge_slave_1: left promiscuous mode [ 937.672070][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.990797][ T5231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 938.000709][ T5231] Bluetooth: hci3: Injecting HCI hardware error event [ 938.011826][T14056] Bluetooth: hci3: hardware error 0x00 [ 938.182229][T15588] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 938.251205][T18186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.297523][T18186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.363180][T15588] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.381270][T15588] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 938.409860][T15588] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 938.419588][T15588] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 938.447634][T15588] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 938.491466][T15588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.508374][T15588] usb 5-1: Product: syz [ 938.512795][T15588] usb 5-1: Manufacturer: syz [ 938.517454][T15588] usb 5-1: SerialNumber: syz [ 938.623044][T11573] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 938.742076][T18174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 938.791873][T11573] usb 1-1: config 97 has an invalid interface descriptor of length 3, skipping [ 938.801652][T11573] usb 1-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 938.825787][T11573] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 938.847592][T11573] usb 1-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 938.869026][T11573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.901650][ T5281] usb 2-1: USB disconnect, device number 94 [ 939.010705][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.024079][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.042347][ T53] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 939.053110][ T53] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 939.073042][ T53] bond0 (unregistering): Released all slaves [ 939.115022][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 939.139093][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 939.149119][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3145'. [ 939.193993][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.250036][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.273305][T18192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.287095][T18193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.302150][T18192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.319934][ T53] tipc: Left network mode [ 939.381137][T18174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 939.451943][ T5281] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 939.633377][T15588] cdc_ncm 5-1:1.0: bind() failure [ 939.642137][T15588] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 939.648996][T15588] cdc_ncm 5-1:1.1: bind() failure [ 939.751551][ T5231] Bluetooth: hci5: command tx timeout [ 940.075136][T14056] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 940.252355][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 940.278940][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 940.322149][T18166] chnl_net:caif_netlink_parms(): no params data found [ 940.482467][ T53] hsr_slave_0: left promiscuous mode [ 940.496108][ T53] hsr_slave_1: left promiscuous mode [ 940.512487][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.527302][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.537867][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.546113][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.578368][ T53] veth1_macvtap: left promiscuous mode [ 940.587742][ T53] veth0_macvtap: left promiscuous mode [ 940.594904][ T53] veth1_vlan: left promiscuous mode [ 940.600804][ T53] veth0_vlan: left promiscuous mode [ 940.699952][ T1850] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 940.768248][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 940.869889][ T1850] usb 3-1: device descriptor read/64, error -71 [ 940.998196][ T25] usb 5-1: USB disconnect, device number 73 [ 941.139522][ T1850] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 941.275977][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3155'. [ 941.291554][ T1850] usb 3-1: device descriptor read/64, error -71 [ 941.321137][T11573] usb 1-1: string descriptor 0 read error: -71 [ 941.335122][T11573] usb 1-1: USB disconnect, device number 72 [ 941.411359][ T1850] usb usb3-port1: attempt power cycle [ 941.617738][ T9870] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 941.751364][ T53] team0 (unregistering): Port device team_slave_1 removed [ 941.774251][ T9870] usb 5-1: Using ep0 maxpacket: 16 [ 941.780071][ T1850] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 941.793415][ T9870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.817850][ T9870] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.827473][ T1850] usb 3-1: device descriptor read/8, error -71 [ 941.830002][T14056] Bluetooth: hci5: command tx timeout [ 941.855152][ T9870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.869366][ T53] team0 (unregistering): Port device team_slave_0 removed [ 941.869996][ T9870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.884668][ T9870] usb 5-1: Product: syz [ 941.888862][ T9870] usb 5-1: Manufacturer: syz [ 941.893793][ T9870] usb 5-1: SerialNumber: syz [ 941.901815][T11573] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 942.074835][ T1850] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 942.126066][T11573] usb 1-1: Using ep0 maxpacket: 8 [ 942.132121][ T1850] usb 3-1: device descriptor read/8, error -71 [ 942.141595][T11573] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 942.165997][T11573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.174230][T11573] usb 1-1: Product: syz [ 942.178510][T11573] usb 1-1: Manufacturer: syz [ 942.201386][T11573] usb 1-1: SerialNumber: syz [ 942.219810][T11573] usb 1-1: config 0 descriptor?? [ 942.266476][ T1850] usb usb3-port1: unable to enumerate USB device [ 942.444519][T11573] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.892816][T18231] bridge_slave_1: left allmulticast mode [ 942.915948][T18231] bridge_slave_1: left promiscuous mode [ 942.936320][T18231] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.997024][ T9870] usb 5-1: 0:2 : does not exist [ 943.020554][ T9870] usb 5-1: USB disconnect, device number 74 [ 943.102269][ T9700] udevd[9700]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.163385][T18246] unknown channel width for channel at 909000KHz? [ 943.185785][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.195644][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.203692][T18166] bridge_slave_0: entered allmulticast mode [ 943.211779][T18166] bridge_slave_0: entered promiscuous mode [ 943.224913][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.232712][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.240690][T18166] bridge_slave_1: entered allmulticast mode [ 943.248447][T18166] bridge_slave_1: entered promiscuous mode [ 943.273687][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3158'. [ 943.301635][T18241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.347272][T18241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.361993][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.372499][ T5280] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 943.412954][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.561393][ T5280] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 943.576421][T18166] team0: Port device team_slave_0 added [ 943.591967][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.606520][T18166] team0: Port device team_slave_1 added [ 943.649926][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.697869][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 943.738628][ T5280] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 943.758315][ T5280] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 943.776112][ T5280] usb 2-1: Manufacturer: syz [ 943.782993][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.801024][ T5280] usb 2-1: config 0 descriptor?? [ 943.806186][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.909945][T14056] Bluetooth: hci5: command tx timeout [ 943.918813][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.941703][T11573] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 943.985096][T18260] geneve0: entered promiscuous mode [ 944.006107][T11573] usb 1-1: USB disconnect, device number 73 [ 944.013155][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.047168][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.118757][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.131262][T18258] geneve0: left promiscuous mode [ 944.273094][ T5280] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 944.280962][ T5280] appleir 0003:05AC:8243.0040: No inputs registered, leaving [ 944.302251][ T5280] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 944.317884][T18166] hsr_slave_0: entered promiscuous mode [ 944.350349][T18166] hsr_slave_1: entered promiscuous mode [ 944.374095][T18166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 944.415829][T18166] Cannot create hsr debugfs directory [ 944.445717][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'. [ 944.475264][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'. [ 944.703493][T18281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.758077][T18281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.898843][ T5281] usb 2-1: USB disconnect, device number 96 [ 945.090278][ T25] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 945.271965][ T25] usb 1-1: config 97 has an invalid interface descriptor of length 3, skipping [ 945.299967][ T25] usb 1-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 945.328401][ T25] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 945.374636][ T25] usb 1-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 945.397916][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.633116][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 945.708265][T18282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.019833][T14056] Bluetooth: hci5: command tx timeout [ 946.144240][ T7272] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.494412][ T7272] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.664884][ T7272] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.776414][T18166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.804163][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.815832][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.833493][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.852929][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.868741][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 946.887462][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.986347][ T7272] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.051121][T18166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 947.113813][T18166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 947.133263][T18166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 947.574191][ T7272] bridge_slave_0: left allmulticast mode [ 947.612924][ T7272] bridge_slave_0: left promiscuous mode [ 947.652643][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.739910][ T25] usb 1-1: string descriptor 0 read error: -71 [ 947.750144][ T25] usb 1-1: USB disconnect, device number 74 [ 948.727608][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 948.750650][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 948.769937][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 948.777936][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 948.787748][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 948.796078][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 948.951588][ T5231] Bluetooth: hci3: command tx timeout [ 949.152695][ T5281] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 949.310127][ T5281] usb 1-1: device descriptor read/64, error -71 [ 949.541945][T11573] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 949.564115][ T7272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.573237][ T5281] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 949.595712][ T7272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.618266][ T7272] bond0 (unregistering): Released all slaves [ 949.732020][ T5281] usb 1-1: device descriptor read/64, error -71 [ 949.748946][T11573] usb 3-1: Using ep0 maxpacket: 32 [ 949.786226][T11573] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 949.840144][T11573] usb 3-1: config 0 has no interface number 0 [ 949.856729][T11573] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 949.871733][ T5281] usb usb1-port1: attempt power cycle [ 949.893709][T11573] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 949.912926][T11573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.937107][T11573] usb 3-1: Product: syz [ 949.961137][T11573] usb 3-1: Manufacturer: syz [ 949.972012][T11573] usb 3-1: SerialNumber: syz [ 949.997515][T11573] usb 3-1: config 0 descriptor?? [ 950.017922][T11573] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 950.028462][T18166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.184078][T18321] chnl_net:caif_netlink_parms(): no params data found [ 950.219988][ T5281] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 950.250477][ T5281] usb 1-1: device descriptor read/8, error -71 [ 950.321530][ T7272] hsr_slave_0: left promiscuous mode [ 950.339543][ T7272] hsr_slave_1: left promiscuous mode [ 950.368455][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.390949][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.412075][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.422015][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.446119][ T1050] usb 3-1: Failed to submit usb control message: -71 [ 950.453500][ T9870] usb 3-1: USB disconnect, device number 115 [ 950.463199][ T1050] usb 3-1: unable to send the bmi data to the device: -71 [ 950.490691][ T1050] usb 3-1: unable to get target info from device [ 950.497108][ T1050] usb 3-1: could not get target info (-71) [ 950.503435][ T5281] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 950.505242][ T7272] veth1_macvtap: left promiscuous mode [ 950.523710][ T1050] usb 3-1: could not probe fw (-71) [ 950.540134][ T7272] veth0_macvtap: left promiscuous mode [ 950.543200][ T5281] usb 1-1: device descriptor read/8, error -71 [ 950.546615][ T7272] veth1_vlan: left promiscuous mode [ 950.582062][ T7272] veth0_vlan: left promiscuous mode [ 950.671101][ T5281] usb usb1-port1: unable to enumerate USB device [ 950.881814][ T5231] Bluetooth: hci0: command tx timeout [ 951.040871][ T5231] Bluetooth: hci3: command tx timeout [ 951.689445][ T7272] team0 (unregistering): Port device team_slave_1 removed [ 951.754710][ T7272] team0 (unregistering): Port device team_slave_0 removed [ 952.615980][T18166] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.724239][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.731446][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.787765][T18440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.803134][T18440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.816826][T18440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.831569][T18442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.848074][T18440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.862450][T18442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.886830][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.894078][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.928513][T18321] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.951233][ T5231] Bluetooth: hci0: command tx timeout [ 952.952649][T18321] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.974902][T18321] bridge_slave_0: entered allmulticast mode [ 952.983149][T18321] bridge_slave_0: entered promiscuous mode [ 953.001259][T18321] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.009923][T18321] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.017733][T18321] bridge_slave_1: entered allmulticast mode [ 953.019955][T11573] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 953.025501][T18321] bridge_slave_1: entered promiscuous mode [ 953.106575][T18350] chnl_net:caif_netlink_parms(): no params data found [ 953.113879][ T5231] Bluetooth: hci3: command tx timeout [ 953.176552][T18321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.243095][T11573] usb 3-1: config 0 has an invalid interface number: 45 but max is 2 [ 953.257220][T11573] usb 3-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 953.280960][T18321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.292603][T11573] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 953.309579][T11573] usb 3-1: config 0 has no interface number 0 [ 953.317892][T11573] usb 3-1: too many endpoints for config 0 interface 45 altsetting 84: 121, using maximum allowed: 30 [ 953.351563][T11573] usb 3-1: config 0 interface 45 altsetting 84 has 0 endpoint descriptors, different from the interface descriptor's value: 121 [ 953.400521][T11573] usb 3-1: config 0 interface 45 has no altsetting 0 [ 953.434720][T11573] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 953.465837][T11573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.506044][T11573] usb 3-1: config 0 descriptor?? [ 953.552818][T18321] team0: Port device team_slave_0 added [ 953.587698][T18350] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.608964][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.619475][T18350] bridge_slave_0: entered allmulticast mode [ 953.628798][T18350] bridge_slave_0: entered promiscuous mode [ 953.654402][T18321] team0: Port device team_slave_1 added [ 953.691366][T18350] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.698859][T18350] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.707057][T18350] bridge_slave_1: entered allmulticast mode [ 953.715529][T18350] bridge_slave_1: entered promiscuous mode [ 953.742708][T11573] usb 3-1: string descriptor 0 read error: -71 [ 953.775055][T11573] usb 3-1: USB disconnect, device number 116 [ 953.797096][T18321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.805509][T18321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.833999][T18321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.849130][T18321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.856417][T18321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.884062][T18321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.952996][ T7272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.988917][T18350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.006369][T18350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.087842][ T7272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.111515][T18350] team0: Port device team_slave_0 added [ 954.135870][T18321] hsr_slave_0: entered promiscuous mode [ 954.147935][T18321] hsr_slave_1: entered promiscuous mode [ 954.155092][T18321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.170596][T18321] Cannot create hsr debugfs directory [ 954.184190][T18350] team0: Port device team_slave_1 added [ 954.337383][ T7272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.438800][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.518129][ T7272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.571378][T18350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.588141][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.625787][T18350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.692001][T18350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.706983][T18350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.757015][T18350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.819339][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 954.828811][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 954.945740][T18350] hsr_slave_0: entered promiscuous mode [ 954.962036][T18350] hsr_slave_1: entered promiscuous mode [ 954.980261][T18350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.990872][T18350] Cannot create hsr debugfs directory [ 955.030445][ T5231] Bluetooth: hci0: command tx timeout [ 955.190012][ T5231] Bluetooth: hci3: command tx timeout [ 955.261487][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.300208][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.372443][ T7272] bridge_slave_0: left allmulticast mode [ 955.379656][ T7272] bridge_slave_0: left promiscuous mode [ 955.391016][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.552599][ T5284] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 955.725128][ T5284] usb 1-1: config 97 has an invalid interface descriptor of length 3, skipping [ 955.734338][ T5284] usb 1-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 955.744699][ T5284] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 955.754162][ T5284] usb 1-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 955.763591][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.944557][T18490] loop2: detected capacity change from 0 to 53 [ 956.035886][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3187'. [ 956.105051][T18492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.184542][ T7272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.200821][ T7272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.215310][ T7272] bond0 (unregistering): Released all slaves [ 956.265054][ T7261] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 956.486606][T18166] veth0_vlan: entered promiscuous mode [ 956.672521][T18166] veth1_vlan: entered promiscuous mode [ 956.744708][T18166] veth0_macvtap: entered promiscuous mode [ 956.777619][T18166] veth1_macvtap: entered promiscuous mode [ 956.808881][ T7272] hsr_slave_0: left promiscuous mode [ 956.822622][ T7272] hsr_slave_1: left promiscuous mode [ 956.853142][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.874866][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.892730][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.902329][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.935127][ T7272] veth1_macvtap: left promiscuous mode [ 956.940994][ T7272] veth0_macvtap: left promiscuous mode [ 956.947253][ T7272] veth1_vlan: left promiscuous mode [ 956.962770][ T7272] veth0_vlan: left promiscuous mode [ 957.110681][ T5231] Bluetooth: hci0: command tx timeout [ 957.231073][ T5281] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 957.386849][ T5281] usb 3-1: device descriptor read/64, error -71 [ 957.639869][ T5281] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 957.778620][ T7272] team0 (unregistering): Port device team_slave_1 removed [ 957.799913][ T5281] usb 3-1: device descriptor read/64, error -71 [ 957.868447][ T7272] team0 (unregistering): Port device team_slave_0 removed [ 957.922723][ T5281] usb usb3-port1: attempt power cycle [ 958.261914][ T5281] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 958.264312][ T5284] usb 1-1: string descriptor 0 read error: -71 [ 958.290900][ T5281] usb 3-1: device descriptor read/8, error -71 [ 958.299938][ T5284] usb 1-1: USB disconnect, device number 79 [ 958.350749][T18499] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 958.565062][ T5281] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 958.591303][ T5281] usb 3-1: device descriptor read/8, error -71 [ 958.720540][ T5281] usb usb3-port1: unable to enumerate USB device [ 958.864129][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 958.874269][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 958.889838][T18321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 958.904951][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.923819][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.944813][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.966896][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.987141][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 959.009261][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.033988][T18166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.116345][T18321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 959.172185][T18321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 959.280863][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.310475][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.329435][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.356114][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.369853][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.389819][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.403282][T18166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 959.415052][T18166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 959.431330][T18166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 959.453709][T18321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 959.564359][T18166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.590867][T18166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.599657][T18166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.608637][T18166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.691702][ T5281] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 959.873009][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 959.889852][ T5281] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 959.906218][T18321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.910326][ T5281] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 959.926801][T18350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 959.961391][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.986450][ T7267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.013730][ T7267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.017236][T18350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 960.028393][ T5281] usb 1-1: config 0 descriptor?? [ 960.047948][T18350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 960.049530][ T5281] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.066060][T18350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 960.089963][T18321] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.144026][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.151358][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.236457][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.243701][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.278601][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.322250][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.404275][ T5281] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 960.441932][ T9516] udevd[9516]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.452582][ T5281] usb 1-1: USB disconnect, device number 80 [ 960.473586][T18321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 960.499079][T18321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 960.600024][ T29] audit: type=1326 audit(1727135160.321:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 960.678409][T18321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.690455][ T29] audit: type=1326 audit(1727135160.321:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 960.774435][ T29] audit: type=1326 audit(1727135160.331:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 960.813602][ T29] audit: type=1326 audit(1727135160.361:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 960.917048][ T29] audit: type=1326 audit(1727135160.371:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 960.969037][T18321] veth0_vlan: entered promiscuous mode [ 960.985386][T18321] veth1_vlan: entered promiscuous mode [ 961.000460][ T29] audit: type=1326 audit(1727135160.371:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 961.064603][T18350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.071486][ T29] audit: type=1326 audit(1727135160.371:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 961.140781][T15588] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 961.150060][ T29] audit: type=1326 audit(1727135160.371:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 961.185206][T18321] veth0_macvtap: entered promiscuous mode [ 961.238036][T18321] veth1_macvtap: entered promiscuous mode [ 961.262230][ T29] audit: type=1326 audit(1727135160.371:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.3.3141" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 961.351406][T15588] usb 4-1: unable to get BOS descriptor or descriptor too short [ 961.379454][T15588] usb 4-1: not running at top speed; connect to a high speed hub [ 961.393923][T18350] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.403903][T15588] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.430820][T15588] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 961.460705][T15588] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 961.497896][T15588] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.538368][T15588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.549172][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.570850][T15588] usb 4-1: Product: syz [ 961.582130][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.593136][T15588] usb 4-1: Manufacturer: syz [ 961.597792][T15588] usb 4-1: SerialNumber: syz [ 961.611185][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.639895][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.672796][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.689877][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.709917][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.739848][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.763250][T18321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.805932][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.813152][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.864111][T18543] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 961.889181][T18543] team0: Cannot enslave team device to itself [ 961.934708][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.941977][ T7261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.989674][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.017975][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.039973][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.054130][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.074753][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.086285][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.096598][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.107702][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.132911][T18321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.150859][T18321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.162846][T18321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.177700][T18566] netem: incorrect gi model size [ 962.184687][T18566] netem: change failed [ 962.302600][T18321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.329765][T18321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.348975][T18321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.369343][T18321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.390487][ T5314] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 962.564659][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.594394][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.607912][ T7272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.620733][ T5314] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 962.643373][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.649438][ T7272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.697371][ T5314] usb 3-1: config 0 descriptor?? [ 962.746413][T18350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.781516][ T7267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.807684][ T7267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.884578][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 962.903872][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 962.983660][T18350] veth0_vlan: entered promiscuous mode [ 963.052603][T18350] veth1_vlan: entered promiscuous mode [ 963.097282][T18587] geneve0: entered promiscuous mode [ 963.121805][T18586] geneve0: left promiscuous mode [ 963.157901][ T5314] uclogic 0003:2179:0053.0041: interface is invalid, ignoring [ 963.211081][T18350] veth0_macvtap: entered promiscuous mode [ 963.248923][T18350] veth1_macvtap: entered promiscuous mode [ 963.309073][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.337519][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.384370][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.405322][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.430413][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.442902][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.470389][T11573] IPVS: starting estimator thread 0... [ 963.476193][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.497275][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.508029][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.519449][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.535660][T18350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.552999][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.567986][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.578409][T18592] IPVS: using max 17 ests per chain, 40800 per kthread [ 963.586085][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.597207][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.607790][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.618786][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.629292][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.640591][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.650947][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.664400][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.678806][T18350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.690378][T18350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.704927][T18350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.767020][T18350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.784065][T18350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.807382][T18350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.839917][T18350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.897923][T15588] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 963.910807][T15588] cdc_ncm 4-1:1.0: bind() failure [ 963.914582][ T9680] usb 3-1: USB disconnect, device number 121 [ 964.138604][T15588] usb 4-1: USB disconnect, device number 80 [ 964.226230][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.237356][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 964.253404][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.303503][ T9870] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 964.477129][T18621] geneve0: entered promiscuous mode [ 964.483257][ T9870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.496760][T18618] geneve0: left promiscuous mode [ 964.502873][ T9870] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 964.526817][ T9870] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.536576][ T9870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.546114][ T9870] usb 5-1: Product: syz [ 964.552385][ T9870] usb 5-1: Manufacturer: syz [ 964.557048][ T9870] usb 5-1: SerialNumber: syz [ 964.581109][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.622622][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.679958][T15588] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 964.796400][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.825172][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.840376][T15588] usb 4-1: Using ep0 maxpacket: 32 [ 964.885837][T15588] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 964.895582][T15588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.915522][T15588] usb 4-1: Product: syz [ 964.920037][T15588] usb 4-1: Manufacturer: syz [ 964.924681][T15588] usb 4-1: SerialNumber: syz [ 964.930755][ T9870] usb 5-1: 0:29 : does not exist [ 964.942829][T15588] usb 4-1: config 0 descriptor?? [ 964.962999][T15588] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 964.976564][ T9870] usb 5-1: USB disconnect, device number 75 [ 965.019661][ T9700] udevd[9700]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.037224][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 965.050842][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 965.074390][T18635] net_ratelimit: 246 callbacks suppressed [ 965.074436][T18635] openvswitch: netlink: Message has 213 unknown bytes. [ 965.115808][T18635] openvswitch: netlink: Actions may not be safe on all matching packets [ 965.440047][ T9870] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 965.470099][T15588] gspca_ov534_9: reg_w failed -110 [ 965.600003][ T9870] usb 5-1: Using ep0 maxpacket: 8 [ 965.616850][ T9870] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 965.635582][ T9870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.660448][ T9870] usb 5-1: config 0 descriptor?? [ 965.754210][T18649] netem: incorrect gi model size [ 965.760073][ T9680] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 965.768816][T18649] netem: change failed [ 965.869935][T15588] gspca_ov534_9: Unknown sensor 0000 [ 965.870163][T15588] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 965.950166][ T9680] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 965.977645][ T9680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.034624][ T9680] usb 1-1: Product: syz [ 966.044689][ T9680] usb 1-1: Manufacturer: syz [ 966.058197][ T9680] usb 1-1: SerialNumber: syz [ 966.067578][ T9680] usb 1-1: config 0 descriptor?? [ 966.319086][T15588] usb 1-1: USB disconnect, device number 81 [ 966.698292][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 966.723427][ T9870] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 966.745534][ T9870] asix 5-1:0.0: probe with driver asix failed with error -71 [ 966.782991][ T9870] usb 5-1: USB disconnect, device number 76 [ 966.825886][T18665] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 966.829504][T18664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3226'. [ 966.892009][T18666] IPVS: stopping backup sync thread 18665 ... [ 966.964550][ T29] audit: type=1326 audit(1727135166.691:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.019623][ T29] audit: type=1326 audit(1727135166.741:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.080088][ T29] audit: type=1326 audit(1727135166.741:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.132354][ T29] audit: type=1326 audit(1727135166.741:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.169470][ T29] audit: type=1326 audit(1727135166.741:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.201022][ T29] audit: type=1326 audit(1727135166.781:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.211365][T18675] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 967.239411][ T29] audit: type=1326 audit(1727135166.781:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.270033][ T29] audit: type=1326 audit(1727135166.781:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18667 comm="syz.2.3227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f47579 code=0x7ffc0000 [ 967.502049][ T9870] usb 4-1: USB disconnect, device number 81 [ 967.517008][T18685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 967.586600][T18685] netlink: 'syz.1.3232': attribute type 10 has an invalid length. [ 967.598891][T18685] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.606545][T18685] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.618239][T18685] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.625508][T18685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.634360][T18685] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.641615][T18685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.653988][T18685] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 967.665837][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 967.680728][T18690] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 967.687302][T18690] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 967.718317][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 967.719880][T15588] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 967.727705][T18690] vhci_hcd vhci_hcd.0: Device attached [ 967.879147][T18690] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 967.890346][ T5281] vhci_hcd: vhci_device speed not set [ 967.931127][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3236'. [ 967.960138][ T5281] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 967.971885][T15588] usb 5-1: config 2 has an invalid interface number: 48 but max is 0 [ 967.980737][T15588] usb 5-1: config 2 has no interface number 0 [ 967.986884][T15588] usb 5-1: config 2 interface 48 has no altsetting 0 [ 968.010519][T15588] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=a0.c8 [ 968.031367][T15588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.109350][T15588] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 968.127689][T15588] cxusb: set interface failed [ 968.134760][T15588] dvb-usb: bulk message failed: -22 (1/0) [ 968.152225][T15588] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 968.188473][T15588] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 968.207435][T15588] usb 5-1: media controller created [ 968.245518][T15588] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 968.291515][ T29] audit: type=1326 audit(1727135168.021:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18683 comm="syz.4.3233" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 968.368733][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 968.513139][T15588] DVB: Unable to find symbol lgdt330x_attach() [ 968.537673][T15588] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 968.565737][T15588] dvb-usb: bulk message failed: -22 (1/0) [ 968.621540][T15588] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 968.678840][T15588] usb 5-1: USB disconnect, device number 77 [ 968.719204][T15588] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 968.959172][ T1050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.245804][T15588] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 969.481778][T18691] vhci_hcd: connection reset by peer [ 969.487482][ T7272] vhci_hcd: stop threads [ 969.495884][T15588] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 969.506108][T15588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.510186][ T7272] vhci_hcd: release socket [ 969.533425][ T7272] vhci_hcd: disconnect device [ 969.560682][T15588] usb 3-1: config 0 descriptor?? [ 969.586763][ T1050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.737690][T14056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 969.753658][T14056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 969.766030][T14056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 969.779132][T14056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 969.792273][T14056] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 969.801442][T14056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.985320][ T1050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.016855][T15588] ath6kl: Failed to submit usb control message: -71 [ 970.051718][T15588] ath6kl: unable to send the bmi data to the device: -71 [ 970.058857][T15588] ath6kl: Unable to send get target info: -71 [ 970.068062][T15588] ath6kl: Failed to init ath6kl core: -71 [ 970.075522][T15588] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 970.087870][T15588] usb 3-1: USB disconnect, device number 122 [ 970.262067][ T1050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.325914][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 970.341368][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 970.495088][T18733] fuse: Unknown parameter '' [ 970.856226][ T1050] bridge_slave_1: left allmulticast mode [ 970.906396][ T1050] bridge_slave_1: left promiscuous mode [ 970.934748][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.958484][ T1050] bridge_slave_0: left allmulticast mode [ 970.974727][ T1050] bridge_slave_0: left promiscuous mode [ 970.984021][T18748] FAULT_INJECTION: forcing a failure. [ 970.984021][T18748] name failslab, interval 1, probability 0, space 0, times 0 [ 970.997693][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.007410][T18748] CPU: 1 UID: 0 PID: 18748 Comm: syz.3.3252 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 971.017900][T18748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 971.028100][T18748] Call Trace: [ 971.031425][T18748] [ 971.034910][T18748] dump_stack_lvl+0x241/0x360 [ 971.039646][T18748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.044910][T18748] ? __pfx__printk+0x10/0x10 [ 971.049557][T18748] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 971.055075][T18748] ? __pfx___might_resched+0x10/0x10 [ 971.060455][T18748] should_fail_ex+0x3b0/0x4e0 [ 971.065204][T18748] should_failslab+0xac/0x100 [ 971.069932][T18748] ? snd_pcm_hw_param_near+0xea/0x740 [ 971.075354][T18748] __kmalloc_cache_noprof+0x6c/0x2c0 [ 971.080795][T18748] ? snd_interval_refine+0x56d/0x900 [ 971.086136][T18748] snd_pcm_hw_param_near+0xea/0x740 [ 971.091382][T18748] ? _snd_pcm_hw_param_set+0x3c0/0x660 [ 971.096878][T18748] ? __pfx_snd_pcm_hw_param_near+0x10/0x10 [ 971.102801][T18748] snd_pcm_oss_change_params_locked+0x1ff5/0x3d60 [ 971.109234][T18748] ? __pfx___might_resched+0x10/0x10 [ 971.114556][T18748] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 971.121339][T18748] ? __pfx___mutex_lock+0x10/0x10 [ 971.126385][T18748] ? tomoyo_path_number_perm+0x71a/0x880 [ 971.132133][T18748] snd_pcm_oss_get_space+0x4a1/0xb20 [ 971.137448][T18748] ? __pfx_snd_pcm_oss_get_space+0x10/0x10 [ 971.143273][T18748] ? __pfx_lock_acquire+0x10/0x10 [ 971.148323][T18748] snd_pcm_oss_ioctl+0x8fc/0xff0 [ 971.153278][T18748] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 971.158753][T18748] ? __fget_files+0x29/0x470 [ 971.163358][T18748] ? __fget_files+0x3f3/0x470 [ 971.168142][T18748] __se_compat_sys_ioctl+0x510/0xc90 [ 971.173452][T18748] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 971.179740][T18748] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 971.185764][T18748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 971.192117][T18748] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 971.198721][T18748] ? lockdep_hardirqs_on+0x99/0x150 [ 971.203962][T18748] __do_fast_syscall_32+0xb4/0x110 [ 971.209093][T18748] ? exc_page_fault+0x590/0x8c0 [ 971.213961][T18748] do_fast_syscall_32+0x34/0x80 [ 971.218833][T18748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 971.225179][T18748] RIP: 0023:0xf7f73579 [ 971.229264][T18748] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 971.248891][T18748] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 971.257411][T18748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008010500d [ 971.265391][T18748] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.273384][T18748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.281379][T18748] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 971.289360][T18748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 971.297356][T18748] [ 971.300484][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.389989][ T25] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 971.545033][T18755] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 971.705859][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 971.728854][ T25] usb 1-1: can't read configurations, error -61 [ 971.901204][ T25] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 971.921031][ T5231] Bluetooth: hci3: command tx timeout [ 972.135051][T18746] netlink: 420 bytes leftover after parsing attributes in process `syz.1.3250'. [ 972.249086][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 972.261524][ T25] usb 1-1: can't read configurations, error -61 [ 972.273499][ T25] usb usb1-port1: attempt power cycle [ 972.640131][ T25] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 972.662649][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 972.674954][ T25] usb 1-1: can't read configurations, error -61 [ 972.819886][ T25] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 972.873470][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 972.881521][ T25] usb 1-1: can't read configurations, error -61 [ 972.920321][ T25] usb usb1-port1: unable to enumerate USB device [ 972.970378][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.007840][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.019454][ T1050] bond0 (unregistering): Released all slaves [ 973.058854][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 973.086329][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 973.110068][ T5281] vhci_hcd: vhci_device speed not set [ 973.280788][T18788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 973.287403][T18788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 973.301741][T18788] vhci_hcd vhci_hcd.0: Device attached [ 973.318436][T18736] chnl_net:caif_netlink_parms(): no params data found [ 973.334279][T18789] vhci_hcd: cannot find the pending unlink 5 [ 973.540816][T15588] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 973.590067][ T937] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 973.771969][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.793598][ T937] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 973.828305][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 973.830127][ T1050] hsr_slave_0: left promiscuous mode [ 973.869894][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.923463][ T937] usb 3-1: config 0 descriptor?? [ 973.940786][ T1050] hsr_slave_1: left promiscuous mode [ 973.951005][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.969078][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.001181][ T5231] Bluetooth: hci3: command tx timeout [ 974.009110][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.047712][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.121689][ T1050] veth1_macvtap: left promiscuous mode [ 974.127473][ T1050] veth0_macvtap: left promiscuous mode [ 974.134019][ T1050] veth1_vlan: left promiscuous mode [ 974.139553][ T1050] veth0_vlan: left promiscuous mode [ 974.165021][T18789] vhci_hcd: connection reset by peer [ 974.178491][ T937] usbhid 3-1:0.0: can't add hid device: -71 [ 974.186003][ T7261] vhci_hcd: stop threads [ 974.191386][ T937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 974.199346][ T7261] vhci_hcd: release socket [ 974.213387][ T7261] vhci_hcd: disconnect device [ 974.223227][ T937] usb 3-1: USB disconnect, device number 123 [ 975.083775][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 975.162494][T18828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.203365][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 975.233838][T18828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 976.080283][ T5231] Bluetooth: hci3: command tx timeout [ 976.318501][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'. [ 976.338398][T18736] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.345841][T18736] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.354379][T18736] bridge_slave_0: entered allmulticast mode [ 976.382619][T18736] bridge_slave_0: entered promiscuous mode [ 976.402727][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'. [ 976.459859][T18736] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.469167][T18736] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.486981][T18736] bridge_slave_1: entered allmulticast mode [ 976.504551][T18736] bridge_slave_1: entered promiscuous mode [ 976.651181][T18736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.734826][T18736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.813564][T18838] bridge0: entered allmulticast mode [ 976.820120][ T5281] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 977.004511][T18736] team0: Port device team_slave_0 added [ 977.010457][ T5281] usb 3-1: device descriptor read/64, error -71 [ 977.023978][T18736] team0: Port device team_slave_1 added [ 977.040139][ T9680] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 977.058909][ T1050] IPVS: stop unused estimator thread 0... [ 977.163244][T18736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.185466][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.216733][ T9680] usb 1-1: device descriptor read/64, error -71 [ 977.269985][ T5281] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 977.293493][T18736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.341035][T18736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.361887][T18736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.412997][ T5281] usb 3-1: device descriptor read/64, error -71 [ 977.435829][T18736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.482751][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 977.492661][ T9680] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 977.500358][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3271'. [ 977.551336][ T5281] usb usb3-port1: attempt power cycle [ 977.648625][ T9680] usb 1-1: device descriptor read/64, error -71 [ 977.707119][T18860] FAULT_INJECTION: forcing a failure. [ 977.707119][T18860] name failslab, interval 1, probability 0, space 0, times 0 [ 977.708974][T18736] hsr_slave_0: entered promiscuous mode [ 977.740769][T18736] hsr_slave_1: entered promiscuous mode [ 977.746086][T18860] CPU: 1 UID: 0 PID: 18860 Comm: syz.1.3272 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 977.756853][T18860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 977.766938][T18860] Call Trace: [ 977.770244][T18860] [ 977.773215][T18860] dump_stack_lvl+0x241/0x360 [ 977.777950][T18860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.783209][T18860] ? __pfx__printk+0x10/0x10 [ 977.787941][T18860] ? fs_reclaim_acquire+0x93/0x140 [ 977.793117][T18860] ? __pfx___might_resched+0x10/0x10 [ 977.798460][T18860] ? dynamic_dname+0x141/0x1b0 [ 977.803278][T18860] should_fail_ex+0x3b0/0x4e0 [ 977.808283][T18860] ? tomoyo_encode+0x26f/0x540 [ 977.813129][T18860] should_failslab+0xac/0x100 [ 977.817859][T18860] ? tomoyo_encode+0x26f/0x540 [ 977.822765][T18860] __kmalloc_noprof+0xd8/0x400 [ 977.827586][T18860] tomoyo_encode+0x26f/0x540 [ 977.832232][T18860] ? __pfx_sockfs_dname+0x10/0x10 [ 977.837308][T18860] tomoyo_realpath_from_path+0x59e/0x5e0 [ 977.843006][T18860] tomoyo_path_number_perm+0x23a/0x880 [ 977.848522][T18860] ? tomoyo_path_number_perm+0x208/0x880 [ 977.854205][T18860] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 977.860523][T18860] ? __pfx_lock_acquire+0x10/0x10 [ 977.865624][T18860] ? __fget_files+0x29/0x470 [ 977.870272][T18860] ? __fget_files+0x3f3/0x470 [ 977.875009][T18860] security_file_ioctl_compat+0xc6/0x2a0 [ 977.880696][T18860] __se_compat_sys_ioctl+0xd6/0xc90 [ 977.885951][T18860] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 977.891819][T18860] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 977.897854][T18860] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 977.904238][T18860] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 977.910885][T18860] ? lockdep_hardirqs_on+0x99/0x150 [ 977.916185][T18860] __do_fast_syscall_32+0xb4/0x110 [ 977.921359][T18860] ? exc_page_fault+0x590/0x8c0 [ 977.926261][T18860] do_fast_syscall_32+0x34/0x80 [ 977.931160][T18860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 977.937545][T18860] RIP: 0023:0xf7f3f579 [ 977.941649][T18860] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 977.961359][T18860] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 977.969826][T18860] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089a2 [ 977.977844][T18860] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.985943][T18860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.993957][T18860] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 978.001949][T18860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 978.009948][T18860] [ 978.019779][ T9680] usb usb1-port1: attempt power cycle [ 978.026863][T18736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.037377][T18860] ERROR: Out of memory at tomoyo_realpath_from_path. [ 978.046139][T18736] Cannot create hsr debugfs directory [ 978.080054][ T5281] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 978.133402][ T5281] usb 3-1: device descriptor read/8, error -71 [ 978.150125][ T5231] Bluetooth: hci3: command tx timeout [ 978.380085][ T9680] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 978.400937][ T5281] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 978.412410][ T9680] usb 1-1: device descriptor read/8, error -71 [ 978.450615][ T5281] usb 3-1: device descriptor read/8, error -71 [ 978.590363][ T5281] usb usb3-port1: unable to enumerate USB device [ 978.618426][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 978.630089][T15588] vhci_hcd: vhci_device speed not set [ 978.682977][ T9680] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 978.722645][ T9680] usb 1-1: device descriptor read/8, error -71 [ 978.843570][ T9680] usb usb1-port1: unable to enumerate USB device [ 979.912695][T18736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 984.049738][ C1] sched: DL replenish lagged too much [ 986.686712][T18736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 986.841465][T18736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 986.895603][T18736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 987.599108][T18736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.707390][T18736] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.729918][T15588] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 987.779863][ T5314] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 987.842980][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.850288][ T7267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.894805][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.902112][ T7267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.925277][T15588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.952249][ T937] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 987.971723][T15588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.982088][ T5314] usb 4-1: Using ep0 maxpacket: 8 [ 987.998747][ T5314] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 988.053430][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 988.070801][ T5314] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 988.089934][T15588] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 988.132236][T15588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.147489][ T5314] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 988.168917][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.201019][T15588] usb 3-1: config 0 descriptor?? [ 988.206404][ T5314] usb 4-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 988.230030][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.259892][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 988.294675][ T937] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 988.327537][ T5314] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 988.369810][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.381948][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.438880][ T5314] usb 4-1: Product: syz [ 988.455147][ T937] usb 1-1: config 0 descriptor?? [ 988.497935][ T5314] usb 4-1: Manufacturer: syz [ 988.555876][ T5314] usb 4-1: SerialNumber: syz [ 988.643420][ T5314] hso 4-1:6.0: Can't find BULK OUT endpoint [ 988.690318][T15588] hid-led 0003:27B8:01ED.0042: probe with driver hid-led failed with error -32 [ 988.833989][T18736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.631515][ T5314] usb 3-1: USB disconnect, device number 2 [ 990.155790][ T937] steelseries 0003:1038:1410.0043: not enough fields in HID_OUTPUT_REPORT 0 [ 993.310313][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.316686][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.769970][ T937] usb 1-1: USB disconnect, device number 90 [ 1006.391569][T14056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.410477][T14056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.431480][T14056] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1006.440518][T14056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1006.452483][T14056] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1006.464355][T14056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1006.552056][T14056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1006.584082][T14056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1006.614520][T14056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1006.625612][T14056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1006.634727][T14056] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1006.644491][T14056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1006.839253][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1006.852916][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1006.872685][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1006.881457][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1006.897752][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1006.905565][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1008.549977][ T5231] Bluetooth: hci4: command tx timeout [ 1008.711348][ T5231] Bluetooth: hci2: command tx timeout [ 1008.950140][ T5231] Bluetooth: hci6: command tx timeout [ 1010.634770][ T5231] Bluetooth: hci4: command tx timeout [ 1010.790291][ T5231] Bluetooth: hci2: command tx timeout [ 1011.030171][ T5231] Bluetooth: hci6: command tx timeout [ 1012.710335][ T5231] Bluetooth: hci4: command tx timeout [ 1012.870081][ T5231] Bluetooth: hci2: command tx timeout [ 1013.111270][T14056] Bluetooth: hci6: command tx timeout [ 1014.791496][ T5231] Bluetooth: hci4: command tx timeout [ 1014.950249][ T5231] Bluetooth: hci2: command tx timeout [ 1015.190262][ T5231] Bluetooth: hci6: command tx timeout [ 1016.360933][T14056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1016.375735][T14056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1016.384874][T14056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1016.395132][T14056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1016.403126][T14056] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1016.415495][T14056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1018.470104][T14056] Bluetooth: hci7: command tx timeout [ 1020.549939][T14056] Bluetooth: hci7: command tx timeout [ 1022.629953][T14056] Bluetooth: hci7: command tx timeout [ 1024.714653][T14056] Bluetooth: hci7: command tx timeout [ 1030.484042][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1030.494778][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1030.504840][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1030.514704][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1030.526572][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1030.539981][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1032.367977][T18965] chnl_net:caif_netlink_parms(): no params data found [ 1032.621128][T18965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.630739][ T5231] Bluetooth: hci8: command tx timeout [ 1032.648675][T18965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.656483][T18965] bridge_slave_0: entered allmulticast mode [ 1032.680118][T18965] bridge_slave_0: entered promiscuous mode [ 1032.699055][T18965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.708737][T18965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.727526][T18965] bridge_slave_1: entered allmulticast mode [ 1032.738754][T18965] bridge_slave_1: entered promiscuous mode [ 1032.910276][T18965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.934984][T18965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.054198][T18965] team0: Port device team_slave_0 added [ 1033.076033][T18965] team0: Port device team_slave_1 added [ 1033.217533][T18965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.229878][T18965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.269489][T18965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.296749][T18965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.309918][T18965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.354840][T18965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.566751][T18965] hsr_slave_0: entered promiscuous mode [ 1033.600703][T18965] hsr_slave_1: entered promiscuous mode [ 1033.620796][T18965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.628430][T18965] Cannot create hsr debugfs directory [ 1034.710194][ T5231] Bluetooth: hci8: command tx timeout [ 1036.792493][ T5231] Bluetooth: hci8: command tx timeout [ 1038.877407][ T5231] Bluetooth: hci8: command tx timeout [ 1054.730321][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.736707][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.857577][T14056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.868218][T14056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.877849][T14056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.886450][T14056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.894586][T14056] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1059.920008][T14056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.030481][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.045187][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.053853][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.064442][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.072861][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1060.082249][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.989987][ T5231] Bluetooth: hci0: command tx timeout [ 1062.150587][ T5231] Bluetooth: hci3: command tx timeout [ 1063.745173][T14056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1063.755769][T14056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1063.768692][T14056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1063.777060][T14056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1063.787065][T14056] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1063.795016][T14056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1064.070019][T14056] Bluetooth: hci0: command tx timeout [ 1064.230214][T14056] Bluetooth: hci3: command tx timeout [ 1065.913958][T14056] Bluetooth: hci5: command tx timeout [ 1066.150323][T14056] Bluetooth: hci0: command tx timeout [ 1066.310267][T14056] Bluetooth: hci3: command tx timeout [ 1067.990126][T14056] Bluetooth: hci5: command tx timeout [ 1068.237067][T14056] Bluetooth: hci0: command tx timeout [ 1068.390217][T14056] Bluetooth: hci3: command tx timeout [ 1070.072243][T14056] Bluetooth: hci5: command tx timeout [ 1072.150421][T14056] Bluetooth: hci5: command tx timeout [ 1076.840507][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1076.851489][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1076.861309][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1076.873545][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1076.883694][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1076.892980][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1078.950560][T14056] Bluetooth: hci9: command tx timeout [ 1081.030316][T14056] Bluetooth: hci9: command tx timeout [ 1083.110276][T14056] Bluetooth: hci9: command tx timeout [ 1085.190582][T14056] Bluetooth: hci9: command tx timeout [ 1090.942616][ T5231] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1090.959089][ T5231] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1090.969523][ T5231] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1090.978228][ T5231] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1090.988298][ T5231] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1091.011591][ T5231] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1093.110449][ T5231] Bluetooth: hci10: command tx timeout [ 1095.190718][ T5231] Bluetooth: hci10: command tx timeout [ 1097.270419][ T5231] Bluetooth: hci10: command tx timeout [ 1099.350448][ T5231] Bluetooth: hci10: command tx timeout [ 1116.154804][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.161394][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.260607][T14056] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1120.271015][T14056] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1120.279285][T14056] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1120.300389][T14056] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1120.324215][T14056] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1120.333631][T14056] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1120.480599][ T5231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1120.492817][ T5231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1120.501773][ T5231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1120.535121][ T5231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1120.543256][ T5231] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1120.552363][ T5231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1122.390144][ T5231] Bluetooth: hci11: command tx timeout [ 1122.630387][ T5231] Bluetooth: hci12: command tx timeout [ 1124.173024][T14056] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1124.183521][T14056] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1124.193470][T14056] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1124.204093][T14056] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1124.217067][T14056] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1124.227482][T14056] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1124.470483][T14056] Bluetooth: hci11: command tx timeout [ 1124.710503][ T5231] Bluetooth: hci12: command tx timeout [ 1126.310478][ T5231] Bluetooth: hci13: command tx timeout [ 1126.550014][ T5231] Bluetooth: hci11: command tx timeout [ 1126.790340][ T5231] Bluetooth: hci12: command tx timeout [ 1128.390010][ T5231] Bluetooth: hci13: command tx timeout [ 1128.631523][ T5231] Bluetooth: hci11: command tx timeout [ 1128.872618][ T5231] Bluetooth: hci12: command tx timeout [ 1130.470006][ T5231] Bluetooth: hci13: command tx timeout [ 1132.550102][T19019] Bluetooth: hci13: command tx timeout [ 1133.600276][T19019] Bluetooth: hci4: command 0x0406 tx timeout [ 1133.606378][T19019] Bluetooth: hci2: command 0x0406 tx timeout [ 1133.614721][T19019] Bluetooth: hci6: command 0x0406 tx timeout [ 1137.222089][ T5231] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1137.240383][ T5231] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1137.251180][ T5231] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1137.262965][ T5231] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1137.274883][ T5231] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1137.284152][ T5231] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1138.717294][ T5231] Bluetooth: hci7: command 0x0406 tx timeout [ 1139.349984][T14056] Bluetooth: hci14: command tx timeout [ 1141.435716][T14056] Bluetooth: hci14: command tx timeout [ 1143.510026][T14056] Bluetooth: hci14: command tx timeout [ 1145.589994][T14056] Bluetooth: hci14: command tx timeout [ 1150.068426][T18965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.265634][ T5231] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1151.278689][ T5231] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1151.289892][ T5231] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1151.297992][ T5231] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1151.308587][ T5231] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1151.316170][ T5231] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1153.350083][ T5231] Bluetooth: hci15: command tx timeout [ 1154.077588][ T5231] Bluetooth: hci8: command 0x0406 tx timeout [ 1155.430060][T14056] Bluetooth: hci15: command tx timeout [ 1157.509968][T14056] Bluetooth: hci15: command tx timeout [ 1159.590123][T14056] Bluetooth: hci15: command tx timeout [ 1177.600919][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.607299][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.607049][ T5231] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1180.619240][ T5231] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1180.629438][ T5231] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1180.650834][ T55] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1180.658821][ T55] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1180.666897][ T55] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1180.677118][ T55] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1180.717940][ T55] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1180.731481][ T55] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1180.743396][ T55] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1180.751657][ T55] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1180.759204][ T55] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1182.789913][ T55] Bluetooth: hci16: command tx timeout [ 1182.870118][ T55] Bluetooth: hci17: command tx timeout [ 1184.456808][T19019] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1184.469370][T19019] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1184.479158][T19019] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1184.488267][T19019] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1184.498475][T19019] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 1184.506429][T19019] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1184.797318][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.803623][T19019] Bluetooth: hci0: command 0x0406 tx timeout [ 1184.870028][T19019] Bluetooth: hci16: command tx timeout [ 1184.949936][ T5231] Bluetooth: hci17: command tx timeout [ 1186.630078][ T5231] Bluetooth: hci18: command tx timeout [ 1186.949968][ T5231] Bluetooth: hci16: command tx timeout [ 1187.030060][ T5231] Bluetooth: hci17: command tx timeout [ 1188.714689][ T5231] Bluetooth: hci18: command tx timeout [ 1189.029935][ T5231] Bluetooth: hci16: command tx timeout [ 1189.110035][ T5231] Bluetooth: hci17: command tx timeout [ 1189.920015][ T5231] Bluetooth: hci5: command 0x0406 tx timeout [ 1190.789966][T14056] Bluetooth: hci18: command tx timeout [ 1192.873237][T14056] Bluetooth: hci18: command tx timeout [ 1193.590213][ T30] INFO: task kworker/u8:3:53 blocked for more than 143 seconds. [ 1193.598034][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1193.629836][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1193.640334][ T30] task:kworker/u8:3 state:D stack:20496 pid:53 tgid:53 ppid:2 flags:0x00004000 [ 1193.669960][ T30] Workqueue: netns cleanup_net [ 1193.674841][ T30] Call Trace: [ 1193.678158][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1193.710430][ T30] __schedule+0x1895/0x4b30 [ 1193.715065][ T30] ? __pfx___schedule+0x10/0x10 [ 1193.817689][ T30] ? __pfx_lock_release+0x10/0x10 [ 1193.841274][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1193.846832][ T30] ? kthread_data+0x52/0xd0 [ 1193.867525][ T30] ? schedule+0x90/0x320 [ 1193.877920][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1193.889477][ T30] ? schedule+0x90/0x320 [ 1193.898963][ T30] schedule+0x14b/0x320 [ 1193.910694][ T30] schedule_preempt_disabled+0x13/0x30 [ 1193.916237][ T30] __mutex_lock+0x6a7/0xd70 [ 1193.931665][ T30] ? __mutex_lock+0x52a/0xd70 [ 1193.936433][ T30] ? cleanup_net+0x6af/0xcc0 [ 1193.949798][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1193.958959][ T30] ? bpf_prog_array_free+0x34/0x40 [ 1193.971086][ T30] cleanup_net+0x6af/0xcc0 [ 1193.979868][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1193.984895][ T30] ? process_scheduled_works+0x976/0x1850 [ 1194.002384][ T30] process_scheduled_works+0xa63/0x1850 [ 1194.008048][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1194.020586][ T30] ? assign_work+0x364/0x3d0 [ 1194.025265][ T30] worker_thread+0x870/0xd30 [ 1194.042303][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1194.047417][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1194.059775][ T30] kthread+0x2f0/0x390 [ 1194.063915][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1194.078420][ T30] ? __pfx_kthread+0x10/0x10 [ 1194.088576][ T30] ret_from_fork+0x4b/0x80 [ 1194.099802][ T30] ? __pfx_kthread+0x10/0x10 [ 1194.104464][ T30] ret_from_fork_asm+0x1a/0x30 [ 1194.109296][ T30] [ 1194.123804][ T30] INFO: task kworker/u8:8:2950 blocked for more than 143 seconds. [ 1194.139836][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1194.147177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1194.174736][ T30] task:kworker/u8:8 state:D stack:21136 pid:2950 tgid:2950 ppid:2 flags:0x00004000 [ 1194.197340][ T30] Workqueue: events_unbound linkwatch_event [ 1194.207520][ T30] Call Trace: [ 1194.219932][ T30] [ 1194.222949][ T30] __schedule+0x1895/0x4b30 [ 1194.227610][ T30] ? __pfx___schedule+0x10/0x10 [ 1194.244581][ T30] ? __pfx_lock_release+0x10/0x10 [ 1194.256068][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1194.269257][ T30] ? kthread_data+0x52/0xd0 [ 1194.279838][ T30] ? schedule+0x90/0x320 [ 1194.284164][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1194.289327][ T30] ? schedule+0x90/0x320 [ 1194.305121][ T30] schedule+0x14b/0x320 [ 1194.309449][ T30] schedule_preempt_disabled+0x13/0x30 [ 1194.320368][ T30] __mutex_lock+0x6a7/0xd70 [ 1194.325004][ T30] ? __mutex_lock+0x52a/0xd70 [ 1194.341494][ T30] ? linkwatch_event+0xe/0x60 [ 1194.346356][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1194.364072][ T30] ? process_scheduled_works+0x976/0x1850 [ 1194.379590][ T30] linkwatch_event+0xe/0x60 [ 1194.384427][ T30] process_scheduled_works+0xa63/0x1850 [ 1194.399771][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1194.405858][ T30] ? assign_work+0x364/0x3d0 [ 1194.424853][ T30] worker_thread+0x870/0xd30 [ 1194.429556][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1194.439803][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1194.445079][ T30] kthread+0x2f0/0x390 [ 1194.449191][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1194.478494][ T30] ? __pfx_kthread+0x10/0x10 [ 1194.484255][ T30] ret_from_fork+0x4b/0x80 [ 1194.488758][ T30] ? __pfx_kthread+0x10/0x10 [ 1194.505160][ T30] ret_from_fork_asm+0x1a/0x30 [ 1194.516555][ T30] [ 1194.520429][ T30] INFO: task dhcpcd:4896 blocked for more than 144 seconds. [ 1194.527759][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1194.546682][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1194.559866][ T30] task:dhcpcd state:D stack:20608 pid:4896 tgid:4896 ppid:4895 flags:0x00000002 [ 1194.584595][ T30] Call Trace: [ 1194.587947][ T30] [ 1194.599849][ T30] __schedule+0x1895/0x4b30 [ 1194.604463][ T30] ? __pfx___schedule+0x10/0x10 [ 1194.609366][ T30] ? __pfx_lock_release+0x10/0x10 [ 1194.625387][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1194.639336][ T30] ? schedule+0x90/0x320 [ 1194.644277][ T30] schedule+0x14b/0x320 [ 1194.648493][ T30] schedule_preempt_disabled+0x13/0x30 [ 1194.665794][ T30] __mutex_lock+0x6a7/0xd70 [ 1194.676953][ T30] ? __mutex_lock+0x52a/0xd70 [ 1194.696754][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1194.708761][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1194.719831][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1194.724836][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 1194.740247][ T30] ? __lock_acquire+0x1384/0x2050 [ 1194.745353][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1194.762232][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1194.767075][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1194.785055][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1194.796916][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1194.810622][ T30] netlink_unicast+0x7f6/0x990 [ 1194.815483][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1194.832508][ T30] ? __virt_addr_valid+0x183/0x530 [ 1194.837706][ T30] ? __check_object_size+0x48e/0x900 [ 1194.854461][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1194.859335][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.872896][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1194.878022][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.895150][ T30] __sock_sendmsg+0x221/0x270 [ 1194.907732][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1194.918247][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.929882][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1194.935894][ T30] __sys_sendmsg+0x2aa/0x390 [ 1194.950315][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.955515][ T30] ? netlink_bind+0xaeb/0xc90 [ 1194.971697][ T30] ? __pfx___sys_bind+0x10/0x10 [ 1194.979284][ T30] ? fd_install+0x35c/0x5d0 [ 1194.991239][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1194.998208][ T30] ? do_syscall_64+0x100/0x230 [ 1195.010796][ T30] ? do_syscall_64+0xb6/0x230 [ 1195.015547][ T30] do_syscall_64+0xf3/0x230 [ 1195.031684][ T30] ? clear_bhb_loop+0x35/0x90 [ 1195.036480][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.054096][ T30] RIP: 0033:0x7f6697842a4b [ 1195.058584][ T30] RSP: 002b:00007fffcd9c49e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.077813][ T30] RAX: ffffffffffffffda RBX: 00007f669776a6c0 RCX: 00007f6697842a4b [ 1195.095922][ T30] RDX: 0000000000000000 RSI: 00007fffcd9d8b98 RDI: 0000000000000008 [ 1195.110047][ T30] RBP: 0000000000000008 R08: 0000000000000000 R09: 00007fffcd9d8b98 [ 1195.129317][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 1195.139449][ T30] R13: 00007fffcd9d8b98 R14: 0000000000000048 R15: 0000000000000001 [ 1195.159677][ T30] [ 1195.162864][ T30] INFO: task kworker/0:8:5314 blocked for more than 144 seconds. [ 1195.188115][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1195.199207][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1195.220946][ T30] task:kworker/0:8 state:D stack:14680 pid:5314 tgid:5314 ppid:2 flags:0x00004000 [ 1195.240294][ T30] Workqueue: events switchdev_deferred_process_work [ 1195.246988][ T30] Call Trace: [ 1195.262559][ T30] [ 1195.265560][ T30] __schedule+0x1895/0x4b30 [ 1195.284142][ T30] ? schedule+0x90/0x320 [ 1195.288492][ T30] ? __pfx___schedule+0x10/0x10 [ 1195.299848][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1195.305944][ T30] ? __pfx_lock_release+0x10/0x10 [ 1195.322775][ T30] ? kick_pool+0x1bd/0x620 [ 1195.327298][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1195.340477][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1195.345787][ T30] ? schedule+0x90/0x320 [ 1195.360801][ T30] schedule+0x14b/0x320 [ 1195.365056][ T30] schedule_preempt_disabled+0x13/0x30 [ 1195.381909][ T30] __mutex_lock+0x6a7/0xd70 [ 1195.388106][ T30] ? __mutex_lock+0x52a/0xd70 [ 1195.401963][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 1195.419063][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1195.424754][ T30] ? process_scheduled_works+0x976/0x1850 [ 1195.439735][ T30] switchdev_deferred_process_work+0xe/0x20 [ 1195.445724][ T30] process_scheduled_works+0xa63/0x1850 [ 1195.464087][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1195.478349][ T30] ? assign_work+0x364/0x3d0 [ 1195.483561][ T30] worker_thread+0x870/0xd30 [ 1195.489249][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1195.507488][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1195.519892][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1195.525120][ T30] kthread+0x2f0/0x390 [ 1195.529240][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1195.545588][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.556425][ T30] ret_from_fork+0x4b/0x80 [ 1195.569082][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.578980][ T30] ret_from_fork_asm+0x1a/0x30 [ 1195.590521][ T30] [ 1195.599800][ T30] INFO: task kworker/u8:12:7267 blocked for more than 145 seconds. [ 1195.607756][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1195.628145][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1195.638594][ T30] task:kworker/u8:12 state:D stack:20496 pid:7267 tgid:7267 ppid:2 flags:0x00004000 [ 1195.652896][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 1195.658964][ T30] Call Trace: [ 1195.676360][ T30] [ 1195.679388][ T30] __schedule+0x1895/0x4b30 [ 1195.690532][ T30] ? __pfx___schedule+0x10/0x10 [ 1195.703159][ T30] ? __pfx_lock_release+0x10/0x10 [ 1195.708269][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1195.726021][ T30] ? kthread_data+0x52/0xd0 [ 1195.735885][ T30] ? schedule+0x90/0x320 [ 1195.748561][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1195.760122][ T30] ? schedule+0x90/0x320 [ 1195.764713][ T30] schedule+0x14b/0x320 [ 1195.768932][ T30] schedule_preempt_disabled+0x13/0x30 [ 1195.786423][ T30] __mutex_lock+0x6a7/0xd70 [ 1195.794510][ T30] ? mark_lock+0x9a/0x360 [ 1195.798927][ T30] ? __mutex_lock+0x52a/0xd70 [ 1195.817613][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 1195.829787][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1195.838703][ T30] addrconf_dad_work+0xd0/0x16f0 [ 1195.849848][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1195.855392][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1195.874871][ T30] ? process_scheduled_works+0x976/0x1850 [ 1195.888186][ T30] process_scheduled_works+0xa63/0x1850 [ 1195.899928][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1195.906096][ T30] ? assign_work+0x364/0x3d0 [ 1195.924060][ T30] worker_thread+0x870/0xd30 [ 1195.928768][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1195.939901][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1195.945190][ T30] kthread+0x2f0/0x390 [ 1195.949304][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1195.965240][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.975172][ T30] ret_from_fork+0x4b/0x80 [ 1195.988000][ T30] ? __pfx_kthread+0x10/0x10 [ 1195.993232][ T30] ret_from_fork_asm+0x1a/0x30 [ 1195.999019][ T30] [ 1196.014473][ T30] INFO: task syz-executor:18736 blocked for more than 145 seconds. [ 1196.034862][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1196.055744][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1196.068766][ T30] task:syz-executor state:D stack:20704 pid:18736 tgid:18736 ppid:1 flags:0x20004006 [ 1196.091146][ T30] Call Trace: [ 1196.094738][ T30] [ 1196.097724][ T30] __schedule+0x1895/0x4b30 [ 1196.116560][ T30] ? __pfx___schedule+0x10/0x10 [ 1196.126440][ T30] ? __pfx_lock_release+0x10/0x10 [ 1196.139991][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1196.145552][ T30] ? schedule+0x90/0x320 [ 1196.167157][ T30] schedule+0x14b/0x320 [ 1196.178287][ T30] schedule_preempt_disabled+0x13/0x30 [ 1196.189763][ T30] __mutex_lock+0x6a7/0xd70 [ 1196.194371][ T30] ? __mutex_lock+0x52a/0xd70 [ 1196.199099][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1196.216543][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1196.226623][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1196.240652][ T30] tun_chr_close+0x3b/0x1b0 [ 1196.245253][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1196.261683][ T30] __fput+0x23f/0x880 [ 1196.265765][ T30] task_work_run+0x24f/0x310 [ 1196.279261][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1196.288905][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1196.299852][ T30] ? do_exit+0xa2a/0x28e0 [ 1196.304244][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1196.320178][ T30] ? do_exit+0xa2a/0x28e0 [ 1196.326664][ T30] do_exit+0xa2f/0x28e0 [ 1196.339917][ T30] ? __pfx_do_exit+0x10/0x10 [ 1196.344581][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1196.361422][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1196.367499][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1196.383999][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1196.389201][ T30] do_group_exit+0x207/0x2c0 [ 1196.401692][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1196.407445][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1196.415747][ T30] get_signal+0x176f/0x1810 [ 1196.432269][ T30] ? __pfx_get_signal+0x10/0x10 [ 1196.437222][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1196.457696][ T30] ? __se_compat_sys_socketcall+0xb18/0x1430 [ 1196.465087][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1196.480055][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1196.485957][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1196.507540][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1196.518401][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1196.530708][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1196.536001][ T30] do_fast_syscall_32+0x34/0x80 [ 1196.551033][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1196.557455][ T30] RIP: 0023:0xf7fc1579 [ 1196.579015][ T30] RSP: 002b:00000000f75af7b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1196.598935][ T30] RAX: 0000000000000040 RBX: 000000000000000b RCX: 00000000f75af7c4 [ 1196.607507][ T30] RDX: 0000000000000000 RSI: 00000000f7fb4568 RDI: 00000000f744bff4 [ 1196.629982][ T30] RBP: 00000000f7fb4568 R08: 0000000000000000 R09: 0000000000000000 [ 1196.639063][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1196.660520][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1196.668705][ T30] [ 1196.684299][ T30] INFO: task syz.3.3289:18914 blocked for more than 146 seconds. [ 1196.702911][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1196.716124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1196.739828][ T30] task:syz.3.3289 state:D stack:23856 pid:18914 tgid:18911 ppid:18166 flags:0x20004006 [ 1196.759839][ T30] Call Trace: [ 1196.763201][ T30] [ 1196.766174][ T30] __schedule+0x1895/0x4b30 [ 1196.782875][ T30] ? __pfx___schedule+0x10/0x10 [ 1196.787818][ T30] ? __pfx_lock_release+0x10/0x10 [ 1196.807539][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1196.815854][ T30] ? schedule+0x90/0x320 [ 1196.828363][ T30] schedule+0x14b/0x320 [ 1196.839183][ T30] schedule_preempt_disabled+0x13/0x30 [ 1196.850046][ T30] __mutex_lock+0x6a7/0xd70 [ 1196.854627][ T30] ? __mutex_lock+0x52a/0xd70 [ 1196.859351][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1196.876720][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1196.887980][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1196.898648][ T30] tun_chr_close+0x3b/0x1b0 [ 1196.909043][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1196.921118][ T30] __fput+0x23f/0x880 [ 1196.925200][ T30] task_work_run+0x24f/0x310 [ 1196.940256][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1196.945648][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1196.963303][ T30] ? do_exit+0xa2a/0x28e0 [ 1196.967806][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1196.979865][ T30] ? do_exit+0xa2a/0x28e0 [ 1196.984277][ T30] do_exit+0xa2f/0x28e0 [ 1196.988486][ T30] ? __pfx_do_exit+0x10/0x10 [ 1197.004945][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1197.018249][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1197.029943][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1197.036440][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1197.052691][ T30] do_group_exit+0x207/0x2c0 [ 1197.057357][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1197.069781][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1197.075054][ T30] get_signal+0x176f/0x1810 [ 1197.089761][ T30] ? __sys_sendmsg+0x31e/0x390 [ 1197.094615][ T30] ? __pfx_get_signal+0x10/0x10 [ 1197.099509][ T30] ? fput+0x1a8/0x230 [ 1197.116009][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1197.125783][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1197.140799][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1197.146615][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1197.162986][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1197.168179][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1197.179857][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1197.185126][ T30] do_fast_syscall_32+0x34/0x80 [ 1197.201106][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1197.207523][ T30] RIP: 0023:0xf7f73579 [ 1197.228315][ T30] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1197.248292][ T30] RAX: 0000000000000040 RBX: 0000000000000005 RCX: 0000000020000280 [ 1197.269493][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1197.290398][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1197.298464][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1197.324341][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1197.340585][ T30] [ 1197.349454][ T30] INFO: task syz.1.3297:18952 blocked for more than 147 seconds. [ 1197.368733][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1197.379475][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1197.399802][ T30] task:syz.1.3297 state:D stack:25248 pid:18952 tgid:18951 ppid:18350 flags:0x20004002 [ 1197.421262][ T30] Call Trace: [ 1197.424627][ T30] [ 1197.427602][ T30] __schedule+0x1895/0x4b30 [ 1197.450526][ T30] ? __pfx___schedule+0x10/0x10 [ 1197.455497][ T30] ? __pfx_lock_release+0x10/0x10 [ 1197.470641][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1197.476219][ T30] ? schedule+0x90/0x320 [ 1197.490286][ T30] schedule+0x14b/0x320 [ 1197.494527][ T30] schedule_preempt_disabled+0x13/0x30 [ 1197.511322][ T30] __mutex_lock+0x6a7/0xd70 [ 1197.515910][ T30] ? __mutex_lock+0x52a/0xd70 [ 1197.529767][ T30] ? tun_chr_close+0x3b/0x1b0 [ 1197.546822][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1197.555741][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1197.569791][ T30] tun_chr_close+0x3b/0x1b0 [ 1197.574394][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 1197.579558][ T30] __fput+0x23f/0x880 [ 1197.590933][ T30] task_work_run+0x24f/0x310 [ 1197.596219][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 1197.616603][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1197.628569][ T30] ? do_exit+0xa2a/0x28e0 [ 1197.635324][ T30] ? kmem_cache_free+0x1a2/0x420 [ 1197.650725][ T30] ? do_exit+0xa2a/0x28e0 [ 1197.655137][ T30] do_exit+0xa2f/0x28e0 [ 1197.659347][ T30] ? __pfx_do_exit+0x10/0x10 [ 1197.677971][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1197.689798][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1197.696208][ T30] ? cgroup_freezing+0x2a8/0x350 [ 1197.711680][ T30] do_group_exit+0x207/0x2c0 [ 1197.716346][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1197.729797][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1197.735083][ T30] get_signal+0x176f/0x1810 [ 1197.752076][ T30] ? __sys_sendmsg+0x31e/0x390 [ 1197.757036][ T30] ? __pfx_get_signal+0x10/0x10 [ 1197.769767][ T30] ? fput+0x1a8/0x230 [ 1197.773848][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1197.779445][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1197.797360][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1197.808418][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1197.820026][ T30] __do_fast_syscall_32+0xc4/0x110 [ 1197.825222][ T30] ? exc_page_fault+0x590/0x8c0 [ 1197.839757][ T30] do_fast_syscall_32+0x34/0x80 [ 1197.856713][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1197.867808][ T30] RIP: 0023:0xf7f3f579 [ 1197.884472][ T30] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1197.900628][ T30] RAX: 000000000000002c RBX: 0000000000000003 RCX: 0000000020000540 [ 1197.908682][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1197.929480][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1197.939363][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1197.960456][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1197.969294][ T30] [ 1197.981767][ T30] INFO: task syz-executor:18956 blocked for more than 147 seconds. [ 1198.000073][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1198.007421][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1198.028242][ T30] task:syz-executor state:D stack:26064 pid:18956 tgid:18956 ppid:1 flags:0x20004006 [ 1198.047342][ T30] Call Trace: [ 1198.051080][ T30] [ 1198.054059][ T30] __schedule+0x1895/0x4b30 [ 1198.058627][ T30] ? __pfx___schedule+0x10/0x10 [ 1198.089348][ T30] ? __pfx_lock_release+0x10/0x10 [ 1198.096801][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1198.111509][ T30] ? schedule+0x90/0x320 [ 1198.115824][ T30] schedule+0x14b/0x320 [ 1198.129755][ T30] schedule_preempt_disabled+0x13/0x30 [ 1198.135289][ T30] __mutex_lock+0x6a7/0xd70 [ 1198.152235][ T30] ? __mutex_lock+0x52a/0xd70 [ 1198.157000][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 1198.169744][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1198.180654][ T30] ? read_word_at_a_time+0xe/0x20 [ 1198.185755][ T30] ? sized_strscpy+0x8d/0x220 [ 1198.201610][ T30] ip_tunnel_init_net+0x20e/0x720 [ 1198.206724][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1198.223759][ T30] ? ops_init+0x75/0x590 [ 1198.228088][ T30] ops_init+0x31e/0x590 [ 1198.240141][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1198.245601][ T30] setup_net+0x287/0x9e0 [ 1198.259909][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1198.265552][ T30] ? __pfx_setup_net+0x10/0x10 [ 1198.281851][ T30] copy_net_ns+0x33f/0x570 [ 1198.286395][ T30] create_new_namespaces+0x425/0x7b0 [ 1198.299877][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1198.305706][ T30] ksys_unshare+0x619/0xc10 [ 1198.320226][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1198.325354][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1198.344156][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1198.359863][ T30] __ia32_sys_unshare+0x37/0x40 [ 1198.364819][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1198.378858][ T30] ? exc_page_fault+0x590/0x8c0 [ 1198.386244][ T30] do_fast_syscall_32+0x34/0x80 [ 1198.401263][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.407771][ T30] RIP: 0023:0xf73fd579 [ 1198.420461][ T30] RSP: 002b:00000000f754ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1198.429007][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1198.453473][ T30] RDX: 00000000f73ebff4 RSI: 00000000f72c2a6a RDI: 0000000030000000 [ 1198.471861][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1198.489821][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1198.497896][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1198.518112][ T30] [ 1198.526329][ T30] INFO: task syz-executor:18957 blocked for more than 148 seconds. [ 1198.539855][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1198.547201][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1198.576255][ T30] task:syz-executor state:D stack:25984 pid:18957 tgid:18957 ppid:1 flags:0x20004006 [ 1198.598231][ T30] Call Trace: [ 1198.602119][ T30] [ 1198.605109][ T30] __schedule+0x1895/0x4b30 [ 1198.619801][ T30] ? __pfx___schedule+0x10/0x10 [ 1198.624739][ T30] ? __pfx_lock_release+0x10/0x10 [ 1198.641382][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1198.646937][ T30] ? schedule+0x90/0x320 [ 1198.659766][ T30] schedule+0x14b/0x320 [ 1198.668050][ T30] schedule_preempt_disabled+0x13/0x30 [ 1198.681750][ T30] __mutex_lock+0x6a7/0xd70 [ 1198.686538][ T30] ? __mutex_lock+0x52a/0xd70 [ 1198.699927][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 1198.705203][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1198.720133][ T30] ip_tunnel_init_net+0x20e/0x720 [ 1198.725259][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1198.745170][ T30] ? ops_init+0x75/0x590 [ 1198.749519][ T30] ops_init+0x31e/0x590 [ 1198.760190][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1198.779242][ T30] setup_net+0x287/0x9e0 [ 1198.784118][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1198.800013][ T30] ? __pfx_setup_net+0x10/0x10 [ 1198.804884][ T30] copy_net_ns+0x33f/0x570 [ 1198.809359][ T30] create_new_namespaces+0x425/0x7b0 [ 1198.826919][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1198.837916][ T30] ksys_unshare+0x619/0xc10 [ 1198.848707][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1198.860511][ T30] __ia32_sys_unshare+0x37/0x40 [ 1198.871398][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1198.876593][ T30] ? exc_page_fault+0x590/0x8c0 [ 1198.893975][ T30] do_fast_syscall_32+0x34/0x80 [ 1198.898922][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.917336][ T30] RIP: 0023:0xf7f22579 [ 1198.923055][ T30] RSP: 002b:00000000f750ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1198.940448][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1198.948495][ T30] RDX: 00000000f73abff4 RSI: 00000000f7282a6a RDI: 0000000030000000 [ 1198.969202][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1198.989884][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1198.997942][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.016920][ T30] [ 1199.024003][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1199.039865][ T30] INFO: task syz-executor:18959 blocked for more than 148 seconds. [ 1199.047928][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1199.065847][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1199.080507][ T30] task:syz-executor state:D stack:25296 pid:18959 tgid:18959 ppid:1 flags:0x20004006 [ 1199.106318][ T30] Call Trace: [ 1199.120452][ T30] [ 1199.123466][ T30] __schedule+0x1895/0x4b30 [ 1199.128042][ T30] ? __pfx___schedule+0x10/0x10 [ 1199.143356][ T30] ? __pfx_lock_release+0x10/0x10 [ 1199.148568][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1199.160022][ T30] ? schedule+0x90/0x320 [ 1199.164352][ T30] schedule+0x14b/0x320 [ 1199.168554][ T30] schedule_preempt_disabled+0x13/0x30 [ 1199.186183][ T30] __mutex_lock+0x6a7/0xd70 [ 1199.197639][ T30] ? __mutex_lock+0x52a/0xd70 [ 1199.215281][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 1199.226998][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1199.237982][ T30] ip_tunnel_init_net+0x20e/0x720 [ 1199.249426][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1199.259837][ T30] ? ops_init+0x75/0x590 [ 1199.264175][ T30] ops_init+0x31e/0x590 [ 1199.268390][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1199.287567][ T30] setup_net+0x287/0x9e0 [ 1199.296536][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1199.314566][ T30] ? __pfx_setup_net+0x10/0x10 [ 1199.319538][ T30] copy_net_ns+0x33f/0x570 [ 1199.336897][ T30] create_new_namespaces+0x425/0x7b0 [ 1199.350261][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1199.356085][ T30] ksys_unshare+0x619/0xc10 [ 1199.373412][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1199.388140][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1199.398759][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1199.417748][ T30] __ia32_sys_unshare+0x37/0x40 [ 1199.423234][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1199.428417][ T30] ? exc_page_fault+0x590/0x8c0 [ 1199.446532][ T30] do_fast_syscall_32+0x34/0x80 [ 1199.455764][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1199.470242][ T30] RIP: 0023:0xf73ed579 [ 1199.474385][ T30] RSP: 002b:00000000f753ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1199.495230][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1199.517205][ T30] RDX: 00000000f73dbff4 RSI: 00000000f72b2a6a RDI: 0000000030000000 [ 1199.537117][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1199.548252][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1199.560442][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1199.568508][ T30] [ 1199.585880][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1199.609855][ T30] INFO: task syz-executor:18970 blocked for more than 149 seconds. [ 1199.617834][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1199.639024][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1199.659755][ T30] task:syz-executor state:D stack:26816 pid:18970 tgid:18970 ppid:1 flags:0x20004004 [ 1199.679714][ T30] Call Trace: [ 1199.683073][ T30] [ 1199.700041][ T30] __schedule+0x1895/0x4b30 [ 1199.704664][ T30] ? __pfx___schedule+0x10/0x10 [ 1199.709569][ T30] ? __pfx_lock_release+0x10/0x10 [ 1199.725302][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1199.740512][ T30] ? schedule+0x90/0x320 [ 1199.744861][ T30] schedule+0x14b/0x320 [ 1199.749067][ T30] schedule_preempt_disabled+0x13/0x30 [ 1199.768218][ T30] __mutex_lock+0x6a7/0xd70 [ 1199.775666][ T30] ? __mutex_lock+0x52a/0xd70 [ 1199.788124][ T30] ? register_nexthop_notifier+0x84/0x290 [ 1199.799922][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1199.805149][ T30] ? __asan_memset+0x23/0x50 [ 1199.819785][ T30] register_nexthop_notifier+0x84/0x290 [ 1199.825418][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1199.845843][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 1199.858065][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 1199.869865][ T30] ? __asan_memset+0x23/0x50 [ 1199.874563][ T30] ops_init+0x31e/0x590 [ 1199.878770][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1199.897288][ T30] setup_net+0x287/0x9e0 [ 1199.906800][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1199.927528][ T30] ? __pfx_setup_net+0x10/0x10 [ 1199.938165][ T30] copy_net_ns+0x33f/0x570 [ 1199.949029][ T30] create_new_namespaces+0x425/0x7b0 [ 1199.960453][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1199.966277][ T30] ksys_unshare+0x619/0xc10 [ 1199.982141][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1199.987292][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1200.007087][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1200.018517][ T30] __ia32_sys_unshare+0x37/0x40 [ 1200.030246][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1200.035461][ T30] ? exc_page_fault+0x590/0x8c0 [ 1200.051641][ T30] do_fast_syscall_32+0x34/0x80 [ 1200.056675][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1200.075078][ T30] RIP: 0023:0xf746d579 [ 1200.079232][ T30] RSP: 002b:00000000f75bff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 1200.095298][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 1200.112372][ T30] RDX: 00000000f745bff4 RSI: 00000000f7332a6a RDI: 0000000030000000 [ 1200.129961][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1200.138103][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1200.155822][ T5231] Bluetooth: hci9: command 0x0406 tx timeout [ 1200.173230][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1200.189444][ T30] [ 1200.197984][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1200.220583][ T30] [ 1200.220583][ T30] Showing all locks held in the system: [ 1200.228463][ T30] 3 locks held by ksoftirqd/1/24: [ 1200.250258][ T30] 3 locks held by kworker/1:0/25: [ 1200.255467][ T30] 1 lock held by khungtaskd/30: [ 1200.269884][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1200.288283][ T30] 4 locks held by kworker/u8:3/53: [ 1200.297763][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1200.320063][ T30] #1: ffffc90000bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1200.343555][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1200.364542][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 1200.379815][ T30] 2 locks held by kworker/u8:5/1050: [ 1200.385219][ T30] 3 locks held by kworker/u8:8/2950: [ 1200.403156][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1200.426524][ T30] #1: ffffc90009a37d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1200.450994][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1200.470328][ T30] 1 lock held by dhcpcd/4896: [ 1200.475101][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1200.495369][ T30] 2 locks held by getty/4981: [ 1200.507304][ T30] #0: ffff88802e3290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1200.529821][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1200.550701][ T30] 3 locks held by kworker/0:8/5314: [ 1200.555988][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1200.582577][ T30] #1: ffffc90004437d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1200.599797][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1200.625376][ T30] 3 locks held by kworker/u8:12/7267: [ 1200.639769][ T30] #0: ffff88814bfe5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1200.663269][ T30] #1: ffffc90002eefd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1200.679855][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1200.700112][ T30] 3 locks held by kworker/1:1/9680: [ 1200.705393][ T30] 5 locks held by kworker/u9:1/14056: [ 1200.720234][ T30] #0: ffff888046f53948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1200.744187][ T30] #1: ffffc9000af7fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1200.768402][ T30] #2: ffff888032538d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1200.789981][ T30] #3: ffff888032538078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1200.809868][ T30] #4: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1200.834023][ T30] 1 lock held by syz-executor/18736: [ 1200.839482][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1200.870260][ T30] 1 lock held by syz.3.3289/18914: [ 1200.875458][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1200.899080][ T30] 1 lock held by syz.1.3297/18952: [ 1200.906217][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1200.929796][ T30] 2 locks held by syz-executor/18956: [ 1200.936149][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1200.960342][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1200.981363][ T30] 2 locks held by syz-executor/18957: [ 1200.986812][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.007924][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1201.029817][ T30] 2 locks held by syz-executor/18959: [ 1201.035275][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.057826][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 1201.079446][ T30] 7 locks held by syz-executor/18965: [ 1201.085503][ T30] #0: ffff88803281a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1201.107299][ T30] #1: ffff888032122088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1201.129987][ T30] #2: ffff888026e080f8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1201.149919][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1201.173529][ T30] #4: ffff888031b3b0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1201.194715][ T30] #5: ffff8880693be250 (&devlink->lock_key#58){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1201.217211][ T30] #6: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1201.238267][ T30] 2 locks held by syz-executor/18970: [ 1201.244302][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.264064][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.288615][ T30] 2 locks held by syz-executor/18983: [ 1201.298226][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.319448][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.339709][ T30] 2 locks held by syz-executor/18985: [ 1201.345257][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.366981][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.389090][ T30] 2 locks held by syz-executor/18990: [ 1201.396310][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.417386][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.440571][ T30] 2 locks held by syz-executor/18996: [ 1201.446039][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.468325][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.490272][ T30] 2 locks held by syz-executor/19001: [ 1201.495735][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.520035][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.548386][ T30] 2 locks held by syz-executor/19008: [ 1201.557758][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.579797][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.600035][ T30] 2 locks held by syz-executor/19011: [ 1201.605499][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.627171][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.649820][ T30] 2 locks held by syz-executor/19016: [ 1201.657827][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.680002][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.700868][ T30] 2 locks held by syz-executor/19027: [ 1201.706320][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.728014][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.752003][ T30] 2 locks held by syz-executor/19032: [ 1201.758008][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.779892][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.799977][ T30] 2 locks held by syz-executor/19039: [ 1201.805430][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.826689][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.849715][ T30] 2 locks held by syz-executor/19040: [ 1201.855170][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.879396][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.899856][ T30] 2 locks held by syz-executor/19046: [ 1201.905309][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1201.929935][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1201.956270][ T30] [ 1201.958672][ T30] ============================================= [ 1201.958672][ T30] [ 1201.999378][ T30] NMI backtrace for cpu 0 [ 1202.003793][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1202.014086][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1202.024198][ T30] Call Trace: [ 1202.027548][ T30] [ 1202.030517][ T30] dump_stack_lvl+0x241/0x360 [ 1202.035249][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1202.040496][ T30] ? __pfx__printk+0x10/0x10 [ 1202.045236][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1202.050244][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1202.055840][ T30] ? _printk+0xd5/0x120 [ 1202.060043][ T30] ? __pfx__printk+0x10/0x10 [ 1202.064686][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1202.069585][ T30] ? __pfx__printk+0x10/0x10 [ 1202.074221][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1202.079469][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1202.085683][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1202.091728][ T30] watchdog+0xff4/0x1040 [ 1202.096025][ T30] ? watchdog+0x1ea/0x1040 [ 1202.100495][ T30] ? __pfx_watchdog+0x10/0x10 [ 1202.105226][ T30] kthread+0x2f0/0x390 [ 1202.109331][ T30] ? __pfx_watchdog+0x10/0x10 [ 1202.114054][ T30] ? __pfx_kthread+0x10/0x10 [ 1202.118683][ T30] ret_from_fork+0x4b/0x80 [ 1202.123147][ T30] ? __pfx_kthread+0x10/0x10 [ 1202.127771][ T30] ret_from_fork_asm+0x1a/0x30 [ 1202.132639][ T30] [ 1202.136850][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1202.143105][ C1] NMI backtrace for cpu 1 [ 1202.143120][ C1] CPU: 1 UID: 0 PID: 9680 Comm: kworker/1:1 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1202.143143][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1202.143155][ C1] Workqueue: events nsim_dev_trap_report_work [ 1202.143188][ C1] RIP: 0010:unwind_next_frame+0x176f/0x22d0 [ 1202.143220][ C1] Code: 89 ef 48 89 de 4c 89 fa eb 45 48 8b 54 24 10 48 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 81 0a 00 00 <48> 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 93 0a 00 00 48 0f bf [ 1202.143237][ C1] RSP: 0018:ffffc90000a185f0 EFLAGS: 00000246 [ 1202.143252][ C1] RAX: 0000000000000000 RBX: ffffffff90a39ba0 RCX: 0000000000000000 [ 1202.143270][ C1] RDX: ffffffff90a39ba1 RSI: 0000000000000001 RDI: ffffc90000a18720 [ 1202.143285][ C1] RBP: dffffc0000000000 R08: ffffc90000a1871f R09: 0000000000000000 [ 1202.143298][ C1] R10: ffffc90000a18710 R11: fffff520001430e4 R12: ffffc90009b28000 [ 1202.143313][ C1] R13: ffffc90000a186c0 R14: ffffffff81605500 R15: ffffc90000a18710 [ 1202.143328][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1202.143344][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1202.143357][ C1] CR2: 00000000f7231760 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1202.143375][ C1] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 1202.143386][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1202.143398][ C1] Call Trace: [ 1202.143405][ C1] [ 1202.143414][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1202.143443][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1202.143471][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1202.143499][ C1] ? nmi_handle+0x2a/0x5a0 [ 1202.143525][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1202.143549][ C1] ? nmi_handle+0x14f/0x5a0 [ 1202.143567][ C1] ? nmi_handle+0x2a/0x5a0 [ 1202.143586][ C1] ? unwind_next_frame+0x176f/0x22d0 [ 1202.143613][ C1] ? default_do_nmi+0x63/0x160 [ 1202.143632][ C1] ? exc_nmi+0x123/0x1f0 [ 1202.143649][ C1] ? end_repeat_nmi+0xf/0x53 [ 1202.143672][ C1] ? kthread+0x2f0/0x390 [ 1202.143693][ C1] ? unwind_next_frame+0x176f/0x22d0 [ 1202.143721][ C1] ? unwind_next_frame+0x176f/0x22d0 [ 1202.143750][ C1] ? unwind_next_frame+0x176f/0x22d0 [ 1202.143778][ C1] [ 1202.143785][ C1] [ 1202.143796][ C1] ? worker_thread+0x870/0xd30 [ 1202.143823][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1202.143846][ C1] arch_stack_walk+0x11c/0x150 [ 1202.143867][ C1] ? kthread+0x2f0/0x390 [ 1202.143886][ C1] stack_trace_save+0x118/0x1d0 [ 1202.143907][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1202.143930][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1202.143960][ C1] kasan_save_track+0x3f/0x80 [ 1202.143977][ C1] ? kasan_save_track+0x3f/0x80 [ 1202.143993][ C1] ? kasan_save_free_info+0x40/0x50 [ 1202.144017][ C1] ? __kasan_slab_free+0x59/0x70 [ 1202.144035][ C1] ? kfree+0x1a0/0x440 [ 1202.144055][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 1202.144072][ C1] ? dst_destroy+0x171/0x460 [ 1202.144096][ C1] ? rcu_core+0xaaa/0x17a0 [ 1202.144113][ C1] ? handle_softirqs+0x2c5/0x980 [ 1202.144136][ C1] ? do_softirq+0x11b/0x1e0 [ 1202.144158][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 1202.144180][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1202.144205][ C1] ? process_scheduled_works+0xa63/0x1850 [ 1202.144229][ C1] ? worker_thread+0x870/0xd30 [ 1202.144278][ C1] kasan_save_free_info+0x40/0x50 [ 1202.144302][ C1] __kasan_slab_free+0x59/0x70 [ 1202.144320][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 1202.144337][ C1] kfree+0x1a0/0x440 [ 1202.144357][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 1202.144377][ C1] ref_tracker_free+0x4ef/0x7e0 [ 1202.144396][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1202.144413][ C1] ? dst_destroy+0x171/0x460 [ 1202.144436][ C1] ? rcu_core+0xaaa/0x17a0 [ 1202.144452][ C1] ? handle_softirqs+0x2c5/0x980 [ 1202.144475][ C1] ? do_softirq+0x11b/0x1e0 [ 1202.144496][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 1202.144519][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1202.144544][ C1] ? process_scheduled_works+0xa63/0x1850 [ 1202.144568][ C1] ? worker_thread+0x870/0xd30 [ 1202.144591][ C1] ? kthread+0x2f0/0x390 [ 1202.144606][ C1] ? ret_from_fork+0x4b/0x80 [ 1202.144632][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1202.144660][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1202.144686][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 1202.144710][ C1] dst_destroy+0x171/0x460 [ 1202.144734][ C1] ? rcu_core+0xa37/0x17a0 [ 1202.144751][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1202.144775][ C1] rcu_core+0xaaa/0x17a0 [ 1202.144800][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1202.144819][ C1] ? sched_clock+0x4a/0x70 [ 1202.144848][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1202.144880][ C1] handle_softirqs+0x2c5/0x980 [ 1202.144906][ C1] ? do_softirq+0x11b/0x1e0 [ 1202.144930][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1202.144958][ C1] do_softirq+0x11b/0x1e0 [ 1202.144980][ C1] [ 1202.144987][ C1] [ 1202.144994][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1202.145017][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1202.145047][ C1] ? rcu_is_watching+0x15/0xb0 [ 1202.145067][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1202.145091][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1202.145117][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1202.145141][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1202.145164][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1202.145193][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1202.145225][ C1] ? process_scheduled_works+0x976/0x1850 [ 1202.145250][ C1] process_scheduled_works+0xa63/0x1850 [ 1202.145291][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1202.145320][ C1] ? assign_work+0x364/0x3d0 [ 1202.145346][ C1] worker_thread+0x870/0xd30 [ 1202.145375][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1202.145398][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1202.145425][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1202.145450][ C1] kthread+0x2f0/0x390 [ 1202.145467][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1202.145491][ C1] ? __pfx_kthread+0x10/0x10 [ 1202.145508][ C1] ret_from_fork+0x4b/0x80 [ 1202.145532][ C1] ? __pfx_kthread+0x10/0x10 [ 1202.145549][ C1] ret_from_fork_asm+0x1a/0x30 [ 1202.145581][ C1] [ 1202.815005][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1202.821942][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 1202.832142][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1202.842247][ T30] Call Trace: [ 1202.845559][ T30] [ 1202.848522][ T30] dump_stack_lvl+0x241/0x360 [ 1202.853346][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1202.858601][ T30] ? __pfx__printk+0x10/0x10 [ 1202.863240][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1202.869287][ T30] ? vscnprintf+0x5d/0x90 [ 1202.873666][ T30] panic+0x349/0x880 [ 1202.877606][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1202.883861][ T30] ? __pfx_panic+0x10/0x10 [ 1202.888329][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1202.893738][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1202.899327][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1202.904735][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1202.910940][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1202.917144][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1202.923355][ T30] watchdog+0x1033/0x1040 [ 1202.927735][ T30] ? watchdog+0x1ea/0x1040 [ 1202.932203][ T30] ? __pfx_watchdog+0x10/0x10 [ 1202.937033][ T30] kthread+0x2f0/0x390 [ 1202.941134][ T30] ? __pfx_watchdog+0x10/0x10 [ 1202.945855][ T30] ? __pfx_kthread+0x10/0x10 [ 1202.950479][ T30] ret_from_fork+0x4b/0x80 [ 1202.954939][ T30] ? __pfx_kthread+0x10/0x10 [ 1202.959561][ T30] ret_from_fork_asm+0x1a/0x30 [ 1202.964380][ T30] [ 1202.967687][ T30] Kernel Offset: disabled [ 1202.972021][ T30] Rebooting in 86400 seconds..